The Protection group represents the LMS_AUDIT_SETTINGS event class.
The keys listed in the following table are used in the bodies of CEF messages of audit event class in the Protection group.
Possible values of fields for classes of Protection group audit events
Key |
Value |
|---|---|
cs1Label |
The value is always |
cs1 |
List of modified settings in the Settings → Protection separated by semicolons (";"). If the record about modified settings in the section is longer than the number of characters specified in the Audit Log settings, it is split into parts. Each part is represented by a separate record in the Audit Log. |