---
title: "iam.imprivata"
canonical: "https://docs.devo.com/space/latest/370442266/iam.imprivata"
format: markdown
---
## Introduction

The tags beginning with `iam.imprivata` identify events generated by [Imprivata](https://www.imprivata.com/)*.*

## Valid tags and data tables 

The full tag must have at least three levels. The first two are fixed as** **`iam.imprivata`**. **The third level identifies the type of events sent.

These are the valid tags and corresponding data tables that will receive the parsers' data:

| **Product / Service** | **Tags** | **Data tables** |
| --- | --- | --- |
| Imprivata | `iam.imprivata.events` | `iam.imprivata.events` |

For more information, read more [about Devo tags](https://devodocs.atlassian.net/wiki/spaces/latest/pages/95126204).

## Table structure

These are the fields displayed in this table:

### iam.imprivata.events

| **Field** | **Type** | ***Extra***** field** | **Field transformation** | **Source field name** |
| --- | --- | --- | --- | --- |
| *eventdate* | `timestamp` |  |  |  |
| *host* | `str` |  | ```
split(hostchain, "=", 0)
``` | *hostchain* |
| *sourceEventDate* | `str` |  |  | * * |
| *product* | `str` |  |  | * * |
| *priority* | `str` |  |  | * * |
| *source* | `str` |  |  | * * |
| *message* | `str` |  |  | * * |
| *event* | `str` |  |  | * * |
| *serverIp* | `ip4` |  | ```
ip4(ifthenelse(endswith(server_ip, "."), substring(server_ip, 0, length(server_ip), -1), server_ip))
``` | *server_ip* |
| *time* | `str` |  |  | * * |
| *user* | `str` |  |  | * * |
| *imprivata_domain* | `str` |  |  | * * |
| *hostchain* | `str` | **✓** |  | * * |
| *tag* | `str` | **✓** |  | * * |
| *rawMessage* | `str` | **✓** |  | *rawSource* |