Kaspersky Next XDR Expert
1.2

Contents

Changed the set of spaces to differentiate access to events

Event field name

Field value

DeviceAction
  • space set was created
  • space set was deleted
  • space set was updated (including granting and revoking access permissions)

EventOutcome

succeeded

SourceTranslatedAddress

This field contains the value of the HTTP header x-real-ip or x-forwarded-for. If these headers are absent, the field will be empty.

SourceAddress

The address from which the user logged in. If the user logged in using a proxy, there will be a proxy address.

SourcePort

Port from which the user logged in. If the user logged in using a proxy, there will be a port on the proxy side.

SourceUserName

User login that was used to edit settings.

DeviceCustomString2

ID of the space set.

DeviceCustomString2Label

set ID

DeviceCustomString3

Name of the space set.

DeviceCustomString3Label

set name

Page top
[Topic 294388]