Incident assigned to user

Event field name

Field value

DeviceAction

user is assigned to incident

EventOutcome

succeeded or failed

SourceTranslatedAddress

This field contains the value of the HTTP header x-real-ip or x-forwarded-for. If these headers are absent, the field will be empty.

SourceAddress

The address from which the user logged in. If the user logged in using a proxy, there will be a proxy address.

SourcePort

Port from which the user logged in. If the user logged in using a proxy, there will be a port on the proxy side.

SourceUserName

User name of the user that assigned the user.

SourceUserID

ID of the user that assigned the user.

ExternalID

ID of the incident.

Name

Name of the incident.

DestinationUserName

User name of the user to which the incident was assigned.

DestinationUserID

ID of the user to which the incident was assigned.

Message

If EventOutcome = failed, an error message is written to this field.

DeviceCustomString5

Tenant ID.

DeviceCustomString5Label

tenant ID

DeviceCustomString6

Tenant name.

DeviceCustomString6Label

tenant name

Page top