Focus

Strata Logging Service

DNS Security EMAIL Fields

Table of Contents

DNS Security CEF Fields

DNS Security HTTPS Fields

DNS Security EMAIL Fields

The following table identifies the DNS Security field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
Action	action.value
CortexDataLakeTenantId	customer_id
DNSResolverIP	dest_ip.value
DNSResponse	dns_response
DNSResponseCode	dns_response_code
DestinationUser	dst_user
ToZone	dst_zone
FQDN	fqdn
FromZone	from_zone
ThreatID	gtid
LogSource	log_source
LogSourceGroupID	log_source_group_id
DeviceSN	log_source_id
TimeReceived	log_time
LogType	log_type.value
PanoramaSN	panorama_serial
PlatformType	platform_type
DNSSecurityVersion	protocol
RecordType	record_type
SourceAddress	source_ip.value
SourceUser	source_user
SubType	sub_type.value
ThreatName	threat_name
TimeGenerated	time_generated
SessionDuration	total_time_elapsed
VendorName	vendor_name
DNSCategory	verdict.value

DNS Security CEF Fields

DNS Security HTTPS Fields