: GlobalProtect HTTPS Fields
Focus
Focus

GlobalProtect HTTPS Fields

Table of Contents

GlobalProtect HTTPS Fields

The following table identifies the GlobalProtect field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
HTTPS Name
Query Name
AttemptedGateways
AuthMethod
ConfigVersion
ConnectionMethod
ConnectionErrorID
ConnectionError
RepeatCount, CountOfRepeats
CortexDataLakeTenantID, TenantID
DGHierarchyLevel1
DGHierarchyLevel2
DGHierarchyLevel3
DGHierarchyLevel4
EndpointDeviceName
GlobalProtectClientVersion
EndpointOSType
EndpointOSVersion
EndpointSN
EventIDValue
Gateway
GatewayPriority
GatewaySelectionType
GlobalProtectGatewayLocation
HostID
IsDuplicateLog
LogExported
LogForwarded
IsPrismaNetworks
IsPrismaUsers
LogSource
LogSourceGroupID
DeviceSN
DeviceName
LogSourceTimeZoneOffset
TimeReceived
LogType
LoginDuration
Description
PanoramaSN
PlatformType
Portal
PrivateIPv4
PrivateIPv6
ProjectName
PublicIPv4
PublicIPv6
QuarantineReason
SequenceNo
SourceRegion
SourceUserName
SourceUserDomain
SourceUserName
SourceUserUUID
SSLResponseTime
Stage
EventStatus
Subtype, LogSubtype
TimeGenerated
TimeGeneratedHighResolution
TunnelType
VendorName
VirtualSystem
VirtualSystemID
VirtualSystemName

Recommended For You