UserID HTTPS Fields

The following table identifies the UserID field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
HTTPS Name
Query Name
AuthCompletionTime
AuthFactorNo
AuthenticatedUserDomain
AuthenticatedUserName
AuthenticatedUserUUID
ConfigVersion
CountofRepeats
CortexDataLakeTenantID
DestinationPort
DGHierarchyLevel1
DGHierarchyLevel2
DGHierarchyLevel3
DGHierarchyLevel4
EventID
IsDuplicateLog
IsDuplicateUser
LogExported
LogForwarded
IsPrismaNetworks
IsPrismaUsers
LogSource
DeviceSN
DeviceName
LogSourceTimeZoneOffset
TimeReceived
LogType
MappingDataSource
MappingDataSourceName
MappingDataSourceType
MappingTimeout
MFAFactorType
SequenceNo
SourceIP
SourcePort
Subtype
Tag
TimeGenerated
TimeGeneratedHighResolution
UGFlags
User
UserGroupFound
UserIdentifiedBySource
VendorName
VirtualLocation
VirtualSystemID
VirtualSystemName

Recommended For You