GlobalProtect HTTPS Fields

The following table identifies the GlobalProtect field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
HTTPS Name
Query Name
AttemptedGateways
AuthMethod
ConfigVersion
ConnectionMethod
ConnectionErrorID
ConnectionError
CountOfRepeats
TenantID
DGHierarchyLevel1
DGHierarchyLevel2
DGHierarchyLevel3
DGHierarchyLevel4
EndpointDeviceName
GlobalProtectClientVersion
EndpointOSType
EndpointOSVersion
EndpointSN
EventIDValue
Gateway
GatewayPriority
GatewaySelectionType
GlobalProtectGatewayLocation
HostID
IsDuplicateLog
LogExported
LogForwarded
IsPrismaNetworks
IsPrismaUsers
LogSource
DeviceSN
DeviceName
LogSourceTimeZoneOffset
TimeReceived
LogType
LoginDuration
Description
Portal
PrivateIPv4
PrivateIPv6
PublicIPv4
PublicIPv6
QuarantineReason
SequenceNo
SourceRegion
SourceUserName
SourceUserDomain
SourceUserName
SourceUserUUID
SSLResponseTime
Stage
EventStatus
LogSubtype
TimeGenerated
TimeGeneratedHighResolution
TunnelType
VendorName
VirtualSystem
VirtualSystemID
VirtualSystemName

Recommended For You