DNS Security HTTPS Fields

The following table identifies the DNS Security field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
HTTPS Name
Query Name
Action
CortexDataLakeTenantId
DNSResolverIP
DNSResponse
DNSResponseCode
DestinationUser
ToZone
FQDN
FromZone
ThreatID
LogSource
DeviceSN
TimeReceived
LogType
DNSSecurityVersion
RecordType
SourceAddress
SourceUser
SubType
ThreatName
TimeGenerated
SessionDuration
VendorName
DNSCategory

Recommended For You