Skip to content

Latest commit

 

History

History
20 lines (18 loc) · 544 Bytes

pC_ciscoduojsonappactivitysuccessapi.md

File metadata and controls

20 lines (18 loc) · 544 Bytes
Raw

Parser Content

{
Name = cisco-duo-json-app-activity-success-api
  Vendor = Cisco
  Product = Duo Access
  TimeFormat = "yyyy-MM-dd HH:mm:ss"
  Conditions = [ """API (IAM UI Admin API)""" ]
  Fields = [
    """({time}\d{4}-\d{2}-\d{2}\s(\d{2}:){2}\d{2})""",
    """API \(({app}IAM UI Admin API)\)\|({user}[\w\.\-\!\#\^\~]{1,40}\$?)\|({operation}[^\|]+)\|""",
    """"email":\s*"({email_address}[^@]+@[^.]+\.\w+?)"""",
    """"type":\s*"({object}[^"]+)""""
  ]
  DupFields = ["object->device_name"]
  ParserVersion = "v1.0.0"


}