symantec vip

Expression

product = "symantec vip"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	src_ip	Default		✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	user_agent	Default			✓
app-authentication
app-logout	src_ip	Default		✓
	operation	Default			✓
	user_agent	Default			✓
user-device-remember	src_ip	Default		✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
	user_agent	Default			✓
user-modify	src_ip
	domain	Legacy			✓
	domain_user_name
	user	Legacy	✓
	operation
	user_agent
user-password-forget	src_ip	Default		✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
	user_agent	Default			✓
user-search	src_ip	Default		✓
	domain	Default			✓
	domain_user_name
	user	Default		✓
	operation	Default			✓
	user_agent	Default			✓