KEYFACTOR¶
About¶
Keyfactor is a provider of machine and IoT identity management, offering a cloud-first platform for certificate lifecycle automation, PKI as-a-service, and crypto-agility.
Product Details¶
Vendor URL: KEYFACTOR
Product Type: PKI and certificate automation platform
Product Tier: Tier III
Integration Method: API Token
Integration URL: KEYFACTOR - Cyderes Documentation
Log Guide: N/A
Parser Details¶
Log Format: JSON
Expected Normalization Rate: Near 100%
Data Label: KEYFACTOR
UDM Fields (list of all UDM fields leveraged in the Parser):
| Log File Field | UDM Field |
|---|---|
| JobHistoryId | metadata.product_log_id |
| AgentMachine | src.hostname |
| JobId | src.process.pid |
| JobType | metadata.product_event_type |
| Message | metadata.description |
| Result | security_result.action |
| Status | additional.fields |
| StorePathn | additional.fields |
| ClientMachine | principal.hostname |
Product Event Types¶
| Event | UDM Event Classification |
|---|---|
| all | GENERIC_EVENT |
Log Sample¶
{"JobHistoryId":12345,"AgentMachine":"demo-agent-01","JobId":"11111111-2222-3333-4444-555555555555","Schedule":{"Daily":{"Time":"2025-01-01T10:00:00Z"}},"JobType":"SampleInventory","OperationStart":"2025-01-01T10:00:00Z","OperationEnd":"2025-01-01T10:00:05Z","Message":"Operation completed successfully","Result":"Success","Status":"Completed","StorePath":"aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee:demo-resource-group:demo-keyvault","ClientMachine":"99999999-8888-7777-6666-555555555555"}
Sample Parsing¶
metadata.product_log_id = "12345"
src.hostname = "demo-agent-01"
src.process.pid = "11111111-2222-3333-4444-555555555555"
metadata.product_event_type = "SampleInventory"
metadata.description = "Operation completed successfully"
security_result.action = "Success"
additional.fields = "Completed"
additional.fields = "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee:demo-resource-group:demo-keyvault"
principal.hostname = "99999999-8888-7777-6666-555555555555"