Copyright © Cloud Software Group, Inc. All Rights Reserved

Eventlog:onSecurityEvent

Method

 

Purpose

This method (on Microsoft Windows) reports events as they are asynchronously posted to the Microsoft Windows security event log.

Remarks

Use this method as a data source for rules. Composite event identifiers are represented in the result descriptions by the use of double colons between event parameters (source::event).

Type

Asynchronous IMPACT_INFO.

Arguments

 

Name	Type	Description
source	String	Event source.

Returns

 

Name	Type	Description
Date	String	Date the event was generated
Time	String	Time the event was generated
Record	Integer	Record number of the event. Table is indexed on Record
Event	Integer	Source-specific ID of the event
Event Category	Integer	Source-specific category of the event. The category may be any value between zero and 65535 where zero represents "no category."
Type	String	Event type. Can be one of the following: • Information • Warning • Error • Audit-Success • Audit-Failure
Source	String	Event source
Strings	String	Message template merge strings. These strings are merged into the associated message template to form the complete textual description of the event. These strings are always returned even when the associated message template cannot be found.
Text	String	Complete textual description of the event

 

Copyright © Cloud Software Group, Inc. All Rights Reserved