hmLoadTopic({
hmKeywords:"Evento JSON",
hmTitle:"Eventos exportados a formato JSON",
hmDescription:"Defina un filtro en una categoría de registro de notificaciones para filtrar los registros de eventos enviados a Syslog.",
hmPrevLink:"admin_server_settings_export_to_syslog.html",
hmNextLink:"events_exported_to_cef_format.html",
hmParentLink:"admin_server_settings.html",
hmBreadCrumbs:"<a href=\"using.html\">Usar ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Menú principal<\/a> &gt; Más &gt; <a href=\"admin_server_settings.html\">Configuración<\/a>",
hmTitlePath:"Usar ESET PROTECT On-Prem > ESET PROTECT On-Prem Menú principal > Más > Configuración > Eventos exportados a formato JSON",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Eventos exportados a formato JSON<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">Defina un filtro en una <a href=\"admin_notif_events_on.html\" class=\"topiclink\">categoría de registro de notificaciones<\/a> para filtrar los registros de eventos enviados a Syslog.<\/p>\n\r<p class=\"p_Normal\">JSON es un formato liviano para el intercambio de datos. Se forma con una colección de parejas de nombres y valores, y una lista ordenada de valores.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Eventos exportados<\/span><\/h2>\n\r<p class=\"p_Normal\">Esta sección contiene información sobre el formato y el significado de los atributos de todos los eventos exportados. El mensaje de evento es un objeto JSON con algunas claves obligatorias y otras opcionales. Cada evento exportado contendrá la siguiente clave:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:101px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:700px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de eventos exportados:<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#threat\" class=\"topiclink\">Threat_Event<\/a> (<img alt=\"Detecciones de antivirus\" title=\"Detecciones de antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><\/span><span class=\"f_NormalTableUI\">detecciones<\/span><span class=\"f_NormalTable\"> antivirus)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#firewall\" class=\"topiclink\">FirewallAggregated_Event<\/a> (<img alt=\"Detecciones de firewall\" title=\"Detecciones de firewall\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <\/span><span class=\"f_NormalTableUI\">detecciones<\/span><span class=\"f_NormalTable\"> de firewall)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#hips\" class=\"topiclink\">HipsAggregated_Event<\/a> (<img alt=\"Detección HIPS\" title=\"Detección HIPS\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <\/span><span class=\"f_NormalTableUI\">detecciones<\/span><span class=\"f_NormalTable\"> de HIPS)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#audit\" class=\"topiclink\">Audit_Event<\/a> (<a href=\"audit_log.html\" class=\"topiclink\">registro de auditoría<\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#websites\" class=\"topiclink\">FilteredWebsites_Event<\/a> (sitios web filtrados:<img alt=\"Detecciones de protección web\" title=\"Detecciones de protección web\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/> <\/span><span class=\"f_NormalTableUI\">protección web<\/span><span class=\"f_NormalTable\">)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#eei\" class=\"topiclink\">EnterpriseInspectorAlert_Event<\/a> (alertas de <img alt=\"ESET Inspect alertas\" title=\"ESET Inspect alertas\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/> <a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect <\/a>)<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"events-exported-to-json-format.html#files\" class=\"topiclink\">BlockedFiles_Event<\/a> (<img alt=\"Archivos bloqueados\" title=\"Archivos bloqueados\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">archivos bloqueados<\/a>)<\/span><\/p><\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv4<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dirección IPv4 del equipo que genera el evento.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">ipv6<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dirección IPv6 del equipo que genera el evento.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hostname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hostname del equipo que genera el evento.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_uuid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">UUID del equipo que genera el evento.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">occurred<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hora UTC de la ocurrencia del evento. El formato es %d-%b-%Y %H:%M:%S<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; height:16px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Severidad del evento. Los posibles valores (de menos grave a más grave) son: <\/span><span class=\"f_NormalTableCode\">Información<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Aviso<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Advertencia<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Error<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Critical<\/span><span class=\"f_NormalTable\">, <\/span><span class=\"f_NormalTableCode\">Fatal<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">La ruta completa al grupo estático del equipo que genera el evento. Si la ruta tiene más de 255 caracteres, group_name solo contiene el nombre del grupo estático.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">group_description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Descripción del grupo estático.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">os_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:101px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:700px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Información sobre el sistema operativo del equipo.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Nota\" title=\"Nota\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">Todos los tipos de eventos que se indican a continuación junto con todos los niveles de gravedad se informan al servidor Syslog. Defina un filtro en una <a href=\"admin_notif_events_on.html\" class=\"topiclink\">categoría de registro de notificaciones<\/a> para filtrar los registros de eventos enviados a Syslog.<\/p>\n\r<p class=\"p_Normal\">Los valores notificados dependen de la aplicación de seguridad de ESET (y su versión) instalado en el equipo administrado y solo ESET PROTECT On-Prem informa los datos recibidos. Por lo tanto, ESET no puede proporcionar una lista exhaustiva de todos los valores. Le recomendamos que mida su red y filtre los registros en función de los valores recibidos.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"custom_keys\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Claves personalizadas en función del event_type:<\/span><\/h2>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"threat\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Threat_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Todos los <img alt=\"Detecciones de antivirus\" title=\"Detecciones de antivirus\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><span class=\"f_UI\">eventos de detección<\/span> antivirus generados por puntos de conexión gestionados se reenviarán a Syslog. Clave específica del evento de detección:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de detección<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la detección<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_flags<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indicadores relacionados de la detección<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de exploración<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scan_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de exploración<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">engine_version<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Versión del motor de exploración<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de objeto relacionado con este evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI del objeto<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medidas adoptadas por el punto final<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_error<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Mensaje de error si la &quot;acción&quot; no se ha realizado correctamente<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indica si la detección pudo ser controlada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">need_restart<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Define si es necesario reiniciar o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la cuenta de usuario asociada con el evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del proceso asociado al evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">circumstances<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Breve descripción de lo que causó el evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash SHA1 del flujo de datos (de la detección).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><a id=\"firstseen\" class=\"hmanchor\"><\/a><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hora y fecha cuando la detección se detectó por primera vez en ese equipo. ESET PROTECT On-Prem utiliza diferentes formatos de fecha-hora para el atributo firstseen (y todos los demás atributos fecha-hora) dependiendo del formato de salida del registro (JSON o LEEF):<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">JSON formato:&quot;%d-%b-%Y %H:%M:%S&quot;<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">LEEF formato:&quot;%b %d %Y %H:%M:%S&quot;<\/span><\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a1_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a1_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a1_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro JSON de Threat_Event:<\/a><\/p>\n\r<div id=\"toggle0186a1\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;46:&nbsp;40&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Threat_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-mg&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;1361a9f6-1d45-4561-b33a-b5d6c62c71e0&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:15&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_type&quot;:&nbsp;&quot;Virus&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_name&quot;:&nbsp;&quot;XF\/Gydhex.A&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scanner_id&quot;:&nbsp;&quot;Real-time&nbsp;file&nbsp;system&nbsp;protection&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;scan_id&quot;:&nbsp;&quot;virlog.dat&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;engine_version&quot;:&nbsp;&quot;23497&nbsp;(20210621)&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_type&quot;:&nbsp;&quot;file&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;object_uri&quot;:&nbsp;&quot;file:\/\/\/C:\/Users\/Administrator\/Downloads\/xls\/YICT080714.xls&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action_taken&quot;:&nbsp;&quot;Deleted&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;threat_handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;need_restart&quot;:&nbsp;false,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;username&quot;:&nbsp;&quot;030-MG\\\\Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\WinRAR\\\\WinRAR.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;circumstances&quot;:&nbsp;&quot;Event&nbsp;occurred&nbsp;on&nbsp;a&nbsp;newly&nbsp;created&nbsp;file.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;firstseen&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:46:14&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hash&quot;:&nbsp;&quot;5B97884A45C6C05F93B22C4059F3D9189E88E8B7&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"firewall\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FirewallAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Los registros de eventos generados por ESET Firewall (<img alt=\"Detecciones de firewall\" title=\"Detecciones de firewall\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/> <span class=\"f_UI\">detecciones<\/span> de firewall) los agrega el agente de administración de ESET Management para evitar el desperdicio de ancho de banda durante la replicación del agente de ESET Management o del servidor de ESET PROTECT. Clave específica del evento de Firewall:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del evento<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dirección del origen del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de dirección del origen del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">source_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Puerto de la fuente del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dirección de destino del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de dirección del destino del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_port<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Puerto del destino del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">protocol<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Protocolo<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">account<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la cuenta de usuario asociada con el evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">process_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del proceso asociado al evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de la regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">inbound<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">bool<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Define si la conexión era de entrada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">threat_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la detección<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Define cuántos mensajes iguales fueron generados por el punto final entre dos replicaciones consecutivas entre el servidor ESET PROTECT y la gestión del agente ESET Management<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medida tomada<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indica si la detección pudo ser controlada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a2_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a2_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a2_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro JSON de FirewallAggregated_Event:<\/a><\/p>\n\r<div id=\"toggle0186a2\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FirewallAggregated_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;w16test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;13:10:04&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;Security&nbsp;vulnerability&nbsp;exploitation&nbsp;attempt&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_port&quot;:&nbsp;54568,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;127.0.0.1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_port&quot;:&nbsp;80,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;protocol&quot;:&nbsp;&quot;TCP&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;account&quot;:&nbsp;&quot;NT&nbsp;AUTHORITY\\\\NETWORK&nbsp;SERVICE&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;process_name&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Apache&nbsp;Software&nbsp;Foundation\\\\apache-tomcat-9.0.41\\\\bin\\\\tomcat9.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;inbound&quot;:&nbsp;true,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;threat_name&quot;:&nbsp;&quot;CVE-2017-5638.Struts2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;aggregate_count&quot;:&nbsp;1<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"hips\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">HIPSAggregated_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">Los eventos del Sistema de prevención de intrusiones basado en host (<img alt=\"Detección HIPS\" title=\"Detección HIPS\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/> <span class=\"f_UI\">detecciones<\/span> de HIPS) se filtran según la <span class=\"f_UI\">gravedad<\/span> antes de enviarse como mensajes de Syslog. Los atributos específicos de HIPS son los siguientes:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">application<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la aplicación<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">operation<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Operación<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Destino<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medida tomada<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medidas adoptadas por el punto final<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_name<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de la regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">aggregate_count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Define cuántos mensajes iguales fueron generados por el punto final entre dos replicaciones consecutivas entre el servidor ESET PROTECT y la gestión del agente ESET Management<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indica si la detección pudo ser controlada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a3_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a3_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a3_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro JSON de HipsAggregated_Event:<\/a><\/p>\n\r<div id=\"toggle0186a3\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;13:&nbsp;54:&nbsp;07&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;HipsAggregated_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.181&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;test-w10-uefi&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;5dbe31ae-4ca7-4e8c-972f-15c197d12474&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;11:53:21&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Critical&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;application&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\java.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;operation&quot;:&nbsp;&quot;Attempt&nbsp;to&nbsp;run&nbsp;a&nbsp;suspicious&nbsp;object&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;C:\\\\Users\\\\Administrator\\\\Desktop\\\\es_pack_to_test\\\\test\\\\trojan.exe&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;blocked&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;handled&quot;:&nbsp;true,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;rule_id&quot;:&nbsp;&quot;Suspicious&nbsp;attempt&nbsp;to&nbsp;launch&nbsp;an&nbsp;application&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;aggregate_count&quot;:&nbsp;2<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"audit\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">Audit_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem envía los mensajes de <a href=\"audit_log.html\" class=\"topiclink\">registro de auditoría<\/a> interna a Syslog. Los atributos específicos son los siguientes:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">domain<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dominio de registro de auditoría<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Acción que se lleva a cabo<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Acción de destino que está en funcionamiento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">detail<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Descripción detallada de la acción<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">user<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Usuario de seguridad involucrado<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">result<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Resultado de la acción<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a4_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a4_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a4_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro de Audit_Event:<\/a><\/p>\n\r<div id=\"toggle0186a4\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;11:&nbsp;42:&nbsp;00&nbsp;030—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;event_type&quot;:&nbsp;&quot;Audit_Event&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;hostname&quot;:&nbsp;&quot;030-MG&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;source_uuid&quot;:&nbsp;&quot;72cdf05f-f9c8-49cc-863d-c6b3059a9e8e&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;09:42:00&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;severity&quot;:&nbsp;&quot;Information&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;domain&quot;:&nbsp;&quot;Native&nbsp;user&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;action&quot;:&nbsp;&quot;Login&nbsp;attempt&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;target&quot;:&nbsp;&quot;Administrator&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;detail&quot;:&nbsp;&quot;Authenticating&nbsp;native&nbsp;user&nbsp;\'Administrator\'.&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;user&quot;:&nbsp;&quot;&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&quot;result&quot;:&nbsp;&quot;Success&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"websites\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">FilteredWebsites_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem reenvía los sitios web filtrados (detecciones de <img alt=\"Detecciones de protección web\" title=\"Detecciones de protección web\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_UI\">protección web<\/span>) a Syslog. Los atributos específicos son los siguientes:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del proceso asociado al evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la cuenta de usuario asociada con el evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash SHA1 del objeto filtrado<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">event<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rule_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de la regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action_taken<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medida tomada<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">scanner_id<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ID de exploración<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI del objeto<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dirección de destino del evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">target_address_type<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Tipo de dirección del destino del evento (25769803777 = IPv4; 25769803778 = IPv6)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indica si la detección pudo ser controlada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a5_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a5_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a5_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro JSON de FilteredWebsites_Event:<\/a><\/p>\n\r<div id=\"toggle0186a5\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;21&nbsp;3:&nbsp;56:&nbsp;03&nbsp;020—MG&nbsp;ERAServer[5648]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;FilteredWebsites_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;win-test&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;d9477661-8fa4-4144-b8d4-e37b983bcd69&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;21-Jun-2021&nbsp;03:56:20&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event&quot;:&nbsp;&quot;An&nbsp;attempt&nbsp;to&nbsp;connect&nbsp;to&nbsp;URL&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address&quot;:&nbsp;&quot;192.255.255.255&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;target_address_type&quot;:&nbsp;&quot;IPv4&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;scanner_id&quot;:&nbsp;&quot;HTTP&nbsp;filter&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;action_taken&quot;:&nbsp;&quot;blocked&quot;, &nbsp; &nbsp; &nbsp; &nbsp;&quot;object_uri&quot;:&nbsp;&quot;https:\/\/test.com&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hash&quot;:&nbsp;&quot;ABCDAA625E6961037B8904E113FD0C232A7D0EDC&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;WIN-TEST\\\\Administrator&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;C:\\\\Program&nbsp;Files\\\\Web&nbsp;browser\\\\brwser.exe&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rule_id&quot;:&nbsp;&quot;Blocked&nbsp;by&nbsp;PUA&nbsp;blacklist&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"eei\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">EnterpriseInspectorAlert_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem reenvía las alarmas de <img alt=\"ESET Inspect alertas\" title=\"ESET Inspect alertas\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/><a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect<\/a> a Syslog. Los atributos específicos son los siguientes:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<thead>\n\r<tr class=\"Table_small_no_header\">\n\r<th class=\"Table_small_no_header\" style=\"width:210px;\" scope=\"col\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:104px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:100px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small_no_header\" style=\"width:696px;\" scope=\"col\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del proceso que causa esta alarma<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Dueño del proceso<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">rulename<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la regla que desencadena esta alarma<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">count<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Cantidad de alertas de este tipo que se han generado desde la última alarma<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash SHA1 de la alarma<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eiconsolelink<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Enlace a la alarma en la consola ESET Inspect On-Prem<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">eialarmid<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Subparte del ID del enlace de la alarma (\$1 en ^http.*\/alarm\/([0-9]+)\$)<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">computer_severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nivel de gravedad del equipo<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">severity_score<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">número<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nivel de gravedad de la regla<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><img id=\"toggle0186a6_ICON\" class=\"dropdown-toggle-icon\" alt=\"arrow_down_business\" width=\"21\" height=\"21\" style=\"margin:0;width:21px;height:21px;border:none\" src=\".\/images\/arrow_down_business.svg\"\/> <a id=\"toggle0186a6_LINK\" class=\"dropdown-toggle\" href=\"javascript:void(0)\" data-type=\"dropdown\" data-state=\"0\" data-icon=\"toggle0186a6_ICON\" data-src0=\".\/images\/arrow_down_business.svg\" data-src1=\".\/images\/arrow_up_business.svg\">Ejemplo de registro JSON de EnterpriseInspectorAlert_Event:<\/a><\/p>\n\r<div id=\"toggle0186a6\" class=\"dropdown-toggle-body\" style=\"text-align: left; padding: 0 0 0 0; margin: 0 0 10px 32px;display:none\"><table class=\"Table_code\"  role=\"presentation\">\n\r<tr class=\"Table_code\">\n\r<td class=\"Table_code\"><p class=\"p_Code\" style=\"page-break-inside: avoid;\"><span class=\"f_Code\">Jun&nbsp;16&nbsp;16:19:00&nbsp;Win2016Std&nbsp;ERAServer[2772]:&nbsp;{<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;event_type&quot;:&nbsp;&quot;EnterpriseInspectorAlert_Event&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;ipv4&quot;:&nbsp;&quot;192.168.30.30&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;hostname&quot;:&nbsp;&quot;shdsolec.vddjc&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_name&quot;:&nbsp;&quot;All\/Lost&nbsp;&amp;&nbsp;found&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;os_name&quot;:&nbsp;&quot;Microsoft&nbsp;Windows&nbsp;11&nbsp;Pro&quot;,<\/span><br \/>\n\r<span class=\"f_Code\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&quot;group_description&quot;:&nbsp;&quot;Lost&nbsp;&amp;&nbsp;found&nbsp;static&nbsp;group&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;source_uuid&quot;:&nbsp;&quot;csd77ad2-2453-42f4-80a4-d86dfa9d0543&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;occured&quot;:&nbsp;&quot;13-Jun-2021&nbsp;07:45:00&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity&quot;:&nbsp;&quot;Warning&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;processname&quot;:&nbsp;&quot;ProcessName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;username&quot;:&nbsp;&quot;UserName&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;rulename&quot;:&nbsp;&quot;RuleName2&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;count&quot;:&nbsp;158,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;eiconsolelink&quot;:&nbsp;&quot;http:\/\/eiserver.tmp\/linkToConsole&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;computer_severity_score&quot;:&nbsp;&quot;1&quot;,<\/span><br \/>\n\r<span style=\"width:48px;display:inline-block\">&nbsp;<\/span><span class=\"f_Code\">&quot;severity_score&quot;:&nbsp;&quot;1&quot;<\/span><br \/>\n\r<span class=\"f_Code\">}<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><a id=\"files\" class=\"hmanchor\"><\/a><span class=\"f_Heading3\">BlockedFiles_Event<\/span><\/h3>\n\r<p class=\"p_Normal\">ESET PROTECT On-Prem reenvía las alarmas de los <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">archivos bloqueados<\/a> de ESET Inspect On-Prem <img alt=\"Archivos bloqueados\" title=\"Archivos bloqueados\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/> a Syslog. Los atributos específicos son los siguientes:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" style=\"width:100%;\">\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">processname<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre del proceso asociado al evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">username<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Nombre de la cuenta de usuario asociada con el evento<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">hash<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hash SHA1 del archivo bloqueado<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">object_uri<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">URI del objeto<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">action<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Medida tomada<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">firstseen<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Hora y fecha cuando la detección se detectó por primera vez en ese equipo (<a href=\"events-exported-to-json-format.html#firstseen\" class=\"topiclink\">formato de fecha y hora<\/a>).<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">cause<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">&nbsp;<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">description<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Descripción del archivo bloqueado<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:210px;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">handled<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:104px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">string<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:100px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">opcional<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:696px;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Indica si la detección pudo ser controlada o no<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r"
})
