Mappings: Twistlock Syslog Catch All

Input Requirements

Input	Value
Vendor	Twistlock
Product	Twistlock
Log Format	JSON
Event ID Regex Pattern	`_default_`

Record Output

Output	Value
Vendor	Twistlock
Product	Twistlock
Record Type	Audit

Fields Mapped

Cloud SIEM Schema Field	Original Record Key	Notes
action	effect
description	msg
device_hostname	container_name
user_username	username