This section describes available keys by event type. binaryinfo.observed binaryinfo.group.observed binaryinfo.host.observed feed.ingress.hit.binary feed.storage.hit.binary feed.ingress.hit.process feed.query.hit.process feed.storage.hit.process watchlist.hit.process watchlist.hit.binary Parent topic: Syslog Templates
