Mappings: McAfee WebGateway - CEF - User Timed-out
Input | Value |
---|---|
Vendor | McAfee |
Product | WebGateway |
Log Format | CEF |
Event ID Regex Pattern | USER_TIMED_OUT |
Output | Value |
---|---|
Vendor | McAfee |
Product | Web Gateway |
Record Type | Audit |
Cloud SIEM Schema Field | Original Record Key | Notes |
---|---|---|
action | action | |
description | None | The static text A user session is timed out is populated in this schema field. |
device_hostname | Appliance | |
srcDevice_ip | Source_ID | |
timestamp | Timestamp | We expect the orginal record value of Timestamp is in the format dd/MMM/yyyy:HH:mm:ss.SSS |
user_username | User |