pC_citrixcgatewaysk4appactivitysuccesssharessend.md

Parser Content

{
Name = citrix-cgateway-sk4-app-activity-success-sharessend
Vendor = "Citrix"
Product = "Citrix Gateway"
TimeFormat = "yyyy-MM-dd'T'HH:mm:ss"
Conditions = [
  """destinationServiceName =Citrix ShareFile"""
  """dproc=SharesSend"""
  """"CreatorEmail":"""
]
Fields = [
  """"CreationDate":"({time}\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\d)"""
  """"Name":"({file_path}({file_dir}[^"]*?[\/]+)?({file_name}[^\/"]+?(\.({file_ext}[^\/"]+))?))""""
  """({app}Citrix ShareFile)"""
  """dproc=({operation}[^\s]+)"""
  """"RecipientEmail":"({target}[^"]+)""""
  """"CreatorEmail":"({email_address}([A-Za-z0-9]+[!#$%&'+\/=?^_`~.\-])*[A-Za-z0-9]+@({email_domain}[^\]\s"\\,;\|]+\.[^\]\s"\\,;\|]+))""""
]
ParserVersion = "v1.0.0"


}