1. Home
    2. AutoFocus
    3. AutoFocus™ API References
    4. Perform AutoFocus Searches
    5. Search Field Names
    6. Session Artifacts

    Session Artifacts

    The following table provides field names and related information for session artifacts.
    Field Name
    Artifact Type as it Appears on AutoFocus Web Portal
    Field Type
    Acceptable Values and Examples
    session.app
    Application
    select
    Refer to Application Research Center for application names.
    session.device_country
    Device Country
    select
    Refer to Search Countries and Country Codes for valid values.
    session.device_countrycode
    Device Country Code
    select
    Refer to Search Countries and Country Codes for valid values.
    session.device_hostname
    Device Hostname
    exactString
    Valid device hostname.
    session.device_serial
    Observed In
    exactStringList
    Valid device identifier.
    session.vsys
    Device vsys
    exactString
    Example:
    1
    session.dst_country
    Destination Country
    select
    Refer to Search Countries and Country Codes for valid values.
    session.dst_countrycode
    Destination Country Code
    select
    Refer to Search Countries and Country Codes for valid values.
    session.dst_ip
    Destination IP
    exactStringList
    Valid IP address..
    session.dst_port
    Destination Port
    number
    Valid port number.
    session.emailrecipient
    Email Recipient Address
    string
    Valid email address.
    session.emailsbjcharset
    Email Charset
    exactString
    Example:
    koi8-r
    session.emailsender
    Email Sender Address
    string
    Valid email address.
    session.emailsubject
    Email Subject
    string
    Valid email subject.
    session.filename
    File Name
    string
    Valid file name.
    session.fileurl
    File URL
    url
    Valid URL.
    session.imei
    IMEI
    exactStringList
    IMEI (International Mobile Equipment Identity) of the mobile device
    session.device_industry
    Industry
    select
    • Aerospace and Defense
    • Agriculture
    • Automotive
    • Construction
    • Consulting
    • Education
    • Education - K thru 12
    • Energy
    • Finance
    • Government
    • Healthcare
    • High Tech
    • Higher Education
    • Hospitality
    • Insurance
    • Lower Education
    • Manufacturing
    • Media and Entertainment
    • Non-Profit
    • Other
    • Pharma and Life Sciences
    • Professional and Legal Services
    • Real Estate
    • Service Provider
    • Telecommunications
    • Transportation and Logistics
    • Utilities
    • Waste Management
    • Wholesale and Retail
    session.user_id
    Recipient User ID
    string
    Valid user ID.
    session.region
    Region
    singleSelect
    Possible values:
    Wildfire global cloud:
    us
    Wildfire EU cloud:
    eu
    Wildfire Japan cloud:
    jp
    Wildfire Singapore cloud:
    sg
    Wildfire UK cloud:
    uk
    Wildfire Canada cloud:
    ca
    session.src_country
    Source Country
    select
    Refer to Search Countries and Country Codes for valid values.
    session.src_countrycode
    Source Country Code
    select
    Refer to Search Countries and Country Codes for valid values.
    session.src_ip
    Source IP
    exactStringList
    Valid IP address
    session.src_port
    Source Port
    number
    Valid port number
    session.sha256
    SHA256
    exactStringList
    Valid SHA256 hash
    session.status
    Status
    singleSelect
    Possible value:
    Blocked
    session.tstamp
    Time
    date
    Valid timestamp
    Example:
    2015-09-21T11:33:20
    session.upload_src
    Upload Source
    exactStringList
    Possible values:
    • Firewall
    • Proofpoint
    • Traps
    • Magnifier
    • Manual API
    • Traps Android
    • WF Appliance
    • Prisma SaaS
    • Prisma Access
    • Cortex XDR

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo