Azure-Sentinel/Sample Data/Custom/SecurityBridgeLogs_CL.json

24 строки
2.2 KiB
JSON

[
{
"TenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "abexnwapp1",
"TimeGenerated [UTC]": "1/18/2022, 8:26:12.000 AM",
"Computer": "abexnwapp1",
"RawData": "CEF:0|ABAP-Experts|SecurityBridge|752|1058|Missing author|i5|act=L1058_MAIL cs1=SB1 cs1Label=SAPsid cs2=001 cs2Label=SAPclient cs3=ADABAS D cs3Label=SAPdb cs4=sanitized@sanitized.com cs4Label=Email address event originator cs5=, Email sanitized@sanitized.com, Email sanitized@sanitized.com, Email sanitized@sanitized.com, Email sanitized@sanitized.com cs5Label=Main contact area of responsibility cs6=Moni Jaiswal, Telephone 162 4045709, Email sanitized@sanitized.com cs6Label=Backup contact area of responsibility dhost=abexnwapp1 duid=SECBRIDGE duser=SECBRIDGE dvchost=abexnwapp1 msg=Missing authorization S_ADMI_FCD (System Authorizations), S_ADMI_FCD \\= SCMD for the FM /ABEX/GET_SCMON_STATUS rt=Jan 18 2022 09:17:21 shost= type=0 externalid=0ECF0BBB3F1D1EEC9E86ED690F7B74FE SAPos=Linux SAPrelease=752 SAPinstallationnumber=0090148009 SAPhost=abexnwapp1",
"Type": "SecurityBridgeLogs_CL",
"_ResourceId": ""
},
{
"TenantId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "abexnwapp1",
"TimeGenerated [UTC]": "1/4/2022, 8:32:11.000 AM",
"Computer": "abexnwapp1",
"RawData": "CEF:0|ABAP-Experts|SecurityBridge|752|1019|Intrusion Detection Scanner check|8|cs1=SB2 cs1Label=SAPsid cs4=sanitized@sanitized.com cs4Label=Email address event originator cs5=Valeriia, Email sanitized@sanitized.com cs5Label=Main contact area of responsibility cs6=Moni Jaiswal, Telephone 162 4045709, Email sanitized@sanitized.com cs6Label=Backup contact area of responsibility dhost=abexnwapp1 duid=SECBRIDGE duser=SECBRIDGE dvchost=abexnwapp1 msg=System SB2 runs unguarded, job SECURITY_BRIDGE_IDS_SB2 is not scheduled/released! rt=Dec 30 2021 17:17:12 shost= type=0 externalid=0ECF0BBB3F1D1EEC9AB17E370000CE69 SAPrelease=752 SAPhost=abexnwapp1",
"Type": "SecurityBridgeLogs_CL",
"_ResourceId": ""
}
]