AI Security EMAIL Fields

Table of Contents

The following table identifies the AI Security field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
Action	action
AIIncidentReportID	ai_incident_report_id
AIIncidentSubtype	ai_incident_subtype
AIIncidentType	ai_incident_type
AIModelCSPName	ai_model_csp_name
AIModelCSPRegionName	ai_model_csp_region_name
AIModelName	ai_model_name
AISecurityProfileName	ai_security_profile_name
AISubtypeDetails	ai_subtype_details
CortexDataLakeTenantID	customer_id
DestinationAddress	dest_ip.value
dstPort	dest_port
KubernetesClusterID	k8s_cluster_id
Latency	latency
LogSource	log_source
DeviceSN	log_source_id
DeviceName	log_source_name
TimeReceived	log_time
LogType	log_type.value
MaxLatencyHit	max_latency_hit
PlatformType	platform_type
DestinationPort	protocol.value
ThreatinRequestorResponse	request_response
SessionID	session_id
SessionStartTime	session_start_time
SourceAddress	source_ip.value
SourcePort	source_port
TimeGenerated	time_generated
TimeGeneratedHighResolution	time_generated_high_res
TSGID	tsg_id
VendorName	vendor_name
VendorSeverity	vendor_severity.value