You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
140 lines
4.0 KiB
140 lines
4.0 KiB
{
|
|
"modelName":"MSExchange_Messaging",
|
|
"displayName":"MSExchange Messaging",
|
|
"description":"This is a data model for Microsoft Exchange Messaging.",
|
|
"objectSummary":{
|
|
"Event-Based":1,
|
|
"Transaction-Based":0,
|
|
"Search-Based":0
|
|
},
|
|
"objects":[
|
|
{
|
|
"objectName":"Message_Tracking",
|
|
"displayName":"Message Tracking",
|
|
"parentName":"BaseEvent",
|
|
"fields":[
|
|
{
|
|
"fieldName":"eventtype",
|
|
"owner":"Message_Tracking",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"eventtype",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"message_id",
|
|
"owner":"Message_Tracking",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"message_id",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"recipient",
|
|
"owner":"Message_Tracking",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"recipient",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"sender",
|
|
"owner":"Message_Tracking",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"sender",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"total_bytes",
|
|
"owner":"Message_Tracking",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"total_bytes",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"_time",
|
|
"owner":"BaseEvent",
|
|
"type":"timestamp",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"_time",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"host",
|
|
"owner":"BaseEvent",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"host",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"source",
|
|
"owner":"BaseEvent",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"source",
|
|
"comment":""
|
|
},
|
|
{
|
|
"fieldName":"sourcetype",
|
|
"owner":"BaseEvent",
|
|
"type":"string",
|
|
"fieldSearch":"",
|
|
"required":false,
|
|
"multivalue":false,
|
|
"hidden":false,
|
|
"editable":true,
|
|
"displayName":"sourcetype",
|
|
"comment":""
|
|
}
|
|
],
|
|
"calculations":[
|
|
|
|
],
|
|
"constraints":[
|
|
{
|
|
"search":"eventtype=msexchange-msgtrack",
|
|
"owner":"Message_Tracking"
|
|
}
|
|
],
|
|
"lineage":"Message_Tracking"
|
|
}
|
|
],
|
|
"objectNameList":[
|
|
"Message_Tracking"
|
|
]
|
|
} |