Mappings: Guest Auth Logs

Input Requirements

Input	Value
Vendor	webseal
Product	Proxy
Log Format	JSON
Event ID Regex Pattern	`SUCCESS\|FAILED_VALIDATION\|FAILED_PASSWORD\|FAILED_NOT_FOUND\|FAILED_LOCKED\|FACEBOOK_NOT_ASSOCIATED\|FACEBOOK_GENERAL_ERROR\|FACEBOOK_AUTH_ERROR\|FAILED_TECHNICAL_DIFFICULTY`

Cloud SIEM Schema Field	Original Record Key	Notes
srcDevice_ip	x-forwarded-for	This is a split field. More info to come in the catalog later...