Mappings: PingFederate - Authentication Event
Input | Value |
---|---|
Vendor | PingIdentity |
Product | PingFederate |
Log Format | JSON |
Event ID Regex Pattern | AUTHN_ATTEMPT|SSO |
Output | Value |
---|---|
Vendor | PingIdentity |
Product | PingFederate |
Record Type | Authentication |
Cloud SIEM Schema Field | Original Record Key | Notes |
---|---|---|
action | event | |
application | protocol | |
device_hostname | host | |
normalizedAction | None | The static text logon is populated in this schema field. |
srcDevice_ip | ip | |
success | status | This is a lookup field. More info to come in the catalog later... |
user_username | subject |