>
    Strata Copilot
    AI Runtime Security API EMAIL Fields
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Logging Service
    3. Strata Logging Service Log Reference
    4. AI Security Logs
    5. AI Runtime Security API
    6. AI Runtime Security API EMAIL Fields
    Download PDF
    Strata Logging Service

    AI Runtime Security API EMAIL Fields

    Table of Contents

    AI Runtime Security API EMAIL Fields

    The following table identifies the AI Runtime Security API field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.
    EMAIL Name
    Query Name
    Action
    action
    AgentFramework
    agent_framework
    AgentID
    agent_id
    AIAppCloudProvider
    ai_app_cloud_provider
    AIAppCSPName
    ai_app_csp_name
    AIAppEnvironment
    ai_app_environment
    AIAppUserDomain
    ai_app_user_domain
    AIAppUserGroupID
    ai_app_user_group_id
    AIAppUserGroupName
    ai_app_user_group_name
    AIApplicationUserName
    ai_app_user_name
    AIApplicationName
    ai_application_name
    AIIncidentReportID
    ai_incident_report_id
    AIIncidentSubtype
    ai_incident_subtype
    AIIncidentType
    ai_incident_type
    AIModelName
    ai_model_name
    AISecurityPolicyID
    ai_security_policy_id
    AISecurityPolicyName
    ai_security_policy_name
    AISecurityProfileID
    ai_security_profile_id
    AISecurityProfileName
    ai_security_profile_name
    AISubtypeDetails
    ai_subtype_details
    APIKeyName
    api_key_name
    APIRegion
    api_region
    AppId
    app_id
    AssetID
    asset_id
    CompletedTS
    completed_ts
    ContentMasked
    content_masked
    ContentType
    content_type
    CSPID
    csp_id
    CortexDataLakeTenantId
    customer_id
    DetectionServiceFlags
    detection_service_flags
    FinalPromptAction
    final_prompt_action
    FinalPromptVerdict
    final_prompt_verdict
    FinalResponseAction
    final_response_action
    FinalResponseVerdict
    final_response_verdict
    IsCode
    is_code
    IsPrompt
    is_prompt
    IsPromptAgentRequested
    is_prompt_agent_requested
    IsPromptDLPRequested
    is_prompt_dlp_requested
    IsPromptMCRequested
    is_prompt_mc_requested
    IsPromptPIRequested
    is_prompt_pi_requested
    IsPromptTCRequested
    is_prompt_tc_requested
    IsPromptTGRequested
    is_prompt_tg_requested
    IsPromptURLFRequested
    is_prompt_urlf_requested
    IsResponse
    is_response
    IsResponseAgentRequested
    is_response_agent_requested
    IsResponseCGRequested
    is_response_cg_requested
    IsResponseDBSRequested
    is_response_dbs_requested
    IsResponseDLPRequested
    is_response_dlp_requested
    IsResponseMCRequested
    is_response_mc_requested
    IsResponseTCRequested
    is_response_tc_requested
    IsResponseTGRequested
    is_response_tg_requested
    IsResponseURLFRequested
    is_response_urlf_requested
    Latency
    latency
    LogSource
    log_source
    LogSourceGroupID
    log_source_group_id
    DeviceSN
    log_source_id
    DeviceName
    log_source_name
    LogSourceTimeZoneOffset
    log_source_tz_offset
    TimeReceived
    log_time
    LogType
    log_type.​value
    MaxLatencyHit
    max_latency_hit
    MCPServer
    mcp_server
    PlatformType
    platform_type
    RequestResponse
    request_response
    ScanID
    scan_id
    ScanStartTime
    scan_start_time
    ScanSUBRequestID
    scan_sub_req_id
    ScanType
    scan_type
    SessionUrl
    session_url
    SubType
    sub_type.​value
    TextRecords
    text_records
    TimeGenerated
    time_generated
    TimeGeneratedHighResolution
    time_generated_high_res
    Tokens64
    token_64
    ToolName
    tool_name
    TransactionID
    transaction_id
    TSGID
    tsg_id
    VendorName
    vendor_name
    VendorSeverity
    vendor_severity.​value
    Verdict
    verdict

    © 2026 Palo Alto Networks, Inc. All rights reserved.