Mappings: TCP_HIT

Input Requirements

Input	Value
Vendor	Blue Coat
Product	ProxySG
Log Format	CEF
Event ID Regex Pattern	`TCP_HIT`

Record Output

Output	Value
Vendor	Symantec
Product	Proxy Secure Gateway
Record Type	NetworkProxy

Fields Mapped

Cloud SIEM Schema Field	Original Record Key	Notes
action	act
dstDevice_ip	dst
http_method	requestMethod
http_response_statusCode	deviceSeverity
http_url	request
http_userAgent	requestClientApplication
ipProtocol	requestUrlPort
srcDevice_hostname	dvchost
srcDevice_ip	src
user_username	suser