Configuration EMAIL Fields

Table of Contents

Configuration EMAIL Fields

Example Configuration log in EMAIL:

LogTime=2021-02-23T02:44:27.000000Z
LogSourceID=xxxxxxxxxxxxxx
LogType=CONFIG
Subtype=config
VirtualSystemID=0
VendorSeverity=
VendorName=Palo Alto Networks
TenantID=xxxxxxxxxxxxx
Severity=
LogSource=firewall
LogExported=false
LogSourceTimeZoneOffset=
LogCategory=xxxxx
IsPrismaUsers=false
IsPrismaNetwork=false
IsDuplicateLog=false
EventDetails=
AdminUserUUID=
AdminUserName=xxxxx
AdminUserDomain=
EventTime=2019-07-25T23:30:12.000000Z
IPaddress=xxx.xx.x.xx
VirtualLocation=
EventName=commit-all
AdminUsername=Panorama-admin
Client=
EventResult=submitted
EventPath=
SequenceNo=17
DGHierarchyLevel1=0
DGHierarchyLevel2=0
DGHierarchyLevel3=0
DGHierarchyLevel4=0
VirtualSystemName=<{xwo X
LogSourceName=PA-VM
EventDescription=
_ I Yr0r
TimeGeneratedHighResolution=2019-07-25T23:30:12.000000Z

The following table identifies the Configuration field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
AdminUsername	admin_user
AdminUserDomain	admin_user_info.domain
AdminUserName	admin_user_info.name
AdminUserUUID	admin_user_info.uuid
Client	client.value
ConfigVersion	config_version.value
TenantID	customer_id
DeviceGroup	device_group.value
DGHierarchyLevel1	dg_hier_level_1
DGHierarchyLevel2	dg_hier_level_2
DGHierarchyLevel3	dg_hier_level_3
DGHierarchyLevel4	dg_hier_level_4
IPaddress	event_client_ip.value
EventDescription	event_description
EventDetails	event_detail
EventName	event_name.value
EventPath	event_path
EventResult	event_result.value
EventTime	event_time
IsDuplicateLog	is_dup_log
LogExported	is_exported
IsPrismaNetwork	is_prisma_branch
IsPrismaUsers	is_prisma_mobile
LogCategory	log_category.value
LogSource	log_source
LogSourceGroupID	log_source_group_id
LogSourceID	log_source_id
LogSourceName	log_source_name
LogSourceTimeZoneOffset	log_source_tz_offset
LogTime	log_time
LogType	log_type.value
PanoramaSN	panorama_serial
PlatformType	platform_type
SequenceNo	sequence_no
Severity	severity
Subtype	sub_type.value
Template	template.value
TimeGeneratedHighResolution	time_generated_high_res
VendorName	vendor_name
VendorSeverity	vendor_severity.value
VirtualLocation	vsys
VirtualSystemID	vsys_id
VirtualSystemName	vsys_name

Configuration CEF Fields

Configuration HTTPS Fields

Strata Logging Service Docs

Configuration EMAIL Fields

Strata Logging Service Docs

Configuration EMAIL Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner