Previous Topic: ConfidenceLevelsNext Topic: TriggerType


Wgn3Trigger

This table contains all event triggers (and their associated actions) for all users. A trigger is something that caused one or more actions to be taken as a result of analyzing the event.

Column

Primary Key

Datatype

Length

Notes

EventUID

Key used to uniquely identify a captured or imported event.

Yes

IDENTITYDEF

13

Foreign key: Wgn3Event

TriggerIndex

Part-key used to uniquely identify this trigger.

Yes

INTEGER

4

 

EventTimestamp

The time at which the event occurred.

Yes

TIMESTAMP

8

Foreign key: Wgn3Event

TriggerType

The type of trigger.

 

INTEGER

4

Follow the hyperlink for details.

TriggerName

The name of the trigger.

 

VARCHAR

255

 

TriggerAttributes

Attributes of the trigger.

 

VARCHAR

255

Follow the hyperlink for details.

TriggerText1

Trigger type specific text.

Contains the most significant definition from policy that matched

 

LONGVARCHAR

 

 

TriggerText2

Trigger type specific text.

Contains the extracted data from the event that matched the policy definition of the trigger

 

LONGVARCHAR

 

 

ActionName

Name of the action that the trigger fired.

 

VARCHAR

255

 

ActionAttributes

Attributes of the action fired by the trigger.

 

VARCHAR

255

Follow the hyperlink for details.

ActionType

Type of action fired by the trigger.

 

VARCHAR

255

Follow the hyperlink for details.

PolicyID

Identifies the policy classification associated with the trigger.

 

INTEGER

 

May be NULL if no policy classification is associated with the trigger.

For a list of pre-configured policy classifications that may be defined in this column, please see the Wgn3ClassificationNode table.

Severity

Indicates the severity value of the trigger.

 

INTEGER

 

A value of NULL indicates that the trigger has no severity value.