Activity Monitoring Log Fields

The descriptions and names of available log fields in a Prisma SaaS activity monitoring log.
The activity monitoring log is generated when a user activity rule is matched.
Field Name
Description
timestamp
The time the activity occurred. Values are in
YYYY-MM-DD HH:MM:SS
format.
serial
Serial number of the organization using the service (tenant).
cloud_app_instance
The instance name of the cloud application (not the type of cloud application) associated with the activity.
target2_name
The name of the file, folder, or user associated with the activity.
target2_type
File
,
Folder
, or
User
user
The cloud app user who performed the activity.
source_ip
The source IP address where the activity was performed.
location
The location where the activity was performed.
action
The activity that occurred. For example,
Login
or
Upload
.
target_name
The field name updated or target of the activity.
target_type
The target type. For example,
FieldName
,
Report
, or
File
.

Related Documentation