Focus

Log Forwarding App Schema Reference

IPtag HTTPS Fields

Table of Contents

The following table identifies the IPtag field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name
ConfigVersion	config_version.value
CountOfRepeats	count_of_repeats
TenantID	customer_id
DGHierarchyLevel1	dg_hier_level_1
DGHierarchyLevel2	dg_hier_level_2
DGHierarchyLevel3	dg_hier_level_3
DGHierarchyLevel4	dg_hier_level_4
EventID	event_id.value
IPSubnetRange	ip_subnet_range
IsDuplicateLog	is_dup_log
LogExported	is_exported
LogForwarded	is_forwarded
IsPrismaNetworks	is_prisma_branch
IsPrismaUsers	is_prisma_mobile
LogSetting	log_set
LogSource	log_source
LogSourceGroupID	log_source_group_id
DeviceSN	log_source_id
DeviceName	log_source_name
LogSourceTimeZoneOffset	log_source_tz_offset
TimeReceived	log_time
LogType	log_type.value
MappingDataSource	mapping_data_source_name
MappingDataSourceSubType	mapping_data_source_sub_type.value
MappingDataSourceType	mapping_data_source_type.value
MappingTimeout	mapping_timeout
PanoramaSN	panorama_serial
PlatformType	platform_type
RuleMatched	rule_matched
RuleMatchedUUID	rule_matched_uuid
SequenceNo	sequence_no
SourceIP	source_ip.value
Subtype	sub_type.value
TagName	tag_name
TimeGenerated	time_generated
TimeGeneratedHighResolution	time_generated_high_res
VendorName	vendor_name
VirtualLocation	vsys
VirtualSystemID	vsys_id
VirtualSystemName	vsys_name