Focus

Log Forwarding App Schema Reference

Configuration HTTPS Fields

Table of Contents

The following table identifies the Configuration field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name
AdminUsername	admin_user
AdminUserDomain	admin_user_info.domain
AdminUserName	admin_user_info.name
AdminUserUUID	admin_user_info.uuid
Client	client.value
ConfigVersion	config_version.value
TenantID	customer_id
DeviceGroup	device_group.value
DGHierarchyLevel1	dg_hier_level_1
DGHierarchyLevel2	dg_hier_level_2
DGHierarchyLevel3	dg_hier_level_3
DGHierarchyLevel4	dg_hier_level_4
IPaddress	event_client_ip.value
EventDescription	event_description
EventDetails	event_detail
EventName	event_name.value
EventPath	event_path
EventResult	event_result.value
EventTime	event_time
IsDuplicateLog	is_dup_log
LogExported	is_exported
IsPrismaNetwork	is_prisma_branch
IsPrismaUsers	is_prisma_mobile
LogCategory	log_category.value
LogSource	log_source
LogSourceGroupID	log_source_group_id
LogSourceID	log_source_id
LogSourceName	log_source_name
LogSourceTimeZoneOffset	log_source_tz_offset
LogTime	log_time
LogType	log_type.value
PanoramaSN	panorama_serial
SequenceNo	sequence_no
Severity	severity
Subtype	sub_type.value
Template	template.value
TimeGeneratedHighResolution	time_generated_high_res
VendorName	vendor_name
VendorSeverity	vendor_severity.value
VirtualLocation	vsys
VirtualSystemID	vsys_id
VirtualSystemName	vsys_name