sybase

Expression

product = "sybase"

Fields

Field	Core	Detection	Informational
db_name			✓
additional_info			✓
db_user			✓
db_object			✓
database_user_name

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
database-activity	dest_ip	Default		✓
	dest_host	Default		✓
	db_operation	Default			✓
	user	Default		✓
database-login	src_ip	Default		✓
	dest_ip	Default		✓
	dest_host	Default		✓
	src_host	Default		✓
database-query	dest_ip
	dest_host	Legacy			✓
	db_operation	Legacy	✓	✓
	user	Legacy	✓	✓