>
    Strata Copilot
    Troubleshooting (Prisma Access Agent) EMAIL Fields
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Logging Service
    3. Strata Logging Service Log Reference
    4. Endpoint Logs
    5. Troubleshooting (Prisma Access Agent)
    6. Troubleshooting (Prisma Access Agent) EMAIL Fields
    Download PDF
    Strata Logging Service

    Troubleshooting (Prisma Access Agent) EMAIL Fields

    Table of Contents

    Troubleshooting (Prisma Access Agent) EMAIL Fields

    The following table identifies the Troubleshooting (Prisma Access Agent) field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.
    EMAIL Name
    Query Name
    Action
    action
    AttemptedGateways
    attempted_gateways
    AuthMethod
    auth_method
    CloudReportID
    cloud_reportid
    ConfigVersion
    config_version.​value
    ConnectionMethod
    connect_method
    ConnectionErrorID
    connection_error.​id
    ConnectionError
    connection_error.​value
    CountOfRepeats
    count_of_repeats
    TenantID
    customer_id
    DataProfileName
    data_profile_name
    DestType
    dest_type.​value
    DGHierarchyLevel1
    dg_hier_level_1
    DGHierarchyLevel2
    dg_hier_level_2
    DGHierarchyLevel3
    dg_hier_level_3
    DGHierarchyLevel4
    dg_hier_level_4
    DLPClientVersion
    dlp_client_version
    EndpointDeviceName
    endpoint_device_name
    ZTNAClientVersion
    endpoint_gp_version
    EndpointOSType
    endpoint_os_type
    EndpointOSVersion
    endpoint_os_version
    EndpointSN
    endpoint_serial_number
    EventIDValue
    event_id.​value
    FileName
    file_name
    FileSHA256
    file_sha_256
    FileSize
    file_size
    Gateway
    gateway
    GatewayPriority
    gateway_priority.​value
    GatewaySelectionType
    gateway_selection_type
    ZTNAGatewayLocation
    gpg_location
    HostID
    host_id
    IncidentID
    incident_id
    IsDuplicateLog
    is_dup_log
    LogExported
    is_exported
    LogForwarded
    is_forwarded
    IsPrismaNetworks
    is_prisma_branch
    IsPrismaUsers
    is_prisma_mobile
    LogSource
    log_source
    LogSourceGroupID
    log_source_group_id
    DeviceSN
    log_source_id
    DeviceName
    log_source_name
    LogSourceTimeZoneOffset
    log_source_tz_offset
    TimeReceived
    log_time
    LogType
    log_type.​value
    LoginDuration
    login_duration
    Description
    opaque
    PanoramaSN
    panorama_serial
    PeripheralAttributes
    peripheral_attributes
    PeripheralID
    peripheral_id
    PlatformType
    platform_type
    PolicyID
    policy_id
    PolicyName
    policy_name
    PolicyType
    policy_type
    PolicyVersion
    policy_version
    Portal
    portal
    PrivateIPv4
    private_ip.​value
    PrivateIPv6
    private_ipv6.​value
    ProjectName
    project_name
    PublicIPv4
    public_ip.​value
    PublicIPv6
    public_ipv6.​value
    QuarantineReason
    quarantine_reason
    ReasonPolicy
    reason_policy
    SequenceNo
    sequence_no
    Severity
    severity.​value
    SourceRegion
    source_region
    SourceUserName
    source_user
    SourceUserInfoDomain
    source_user_info.​domain
    SourceUserInfoName
    source_user_info.​name
    SourceUserInfoUUID
    source_user_info.​uuid
    SSLResponseTime
    ssl_response_time
    Stage
    stage
    EventStatus
    status.​value
    LogSubtype
    sub_type.​value
    TimeGenerated
    time_generated
    TimeGeneratedHighResolution
    time_generated_high_res
    TunnelType
    tunnel
    VendorName
    vendor_name
    VirtualSystem
    vsys
    VirtualSystemID
    vsys_id
    VirtualSystemName
    vsys_name

    © 2026 Palo Alto Networks, Inc. All rights reserved.