AI Conversation Log LEEF Fields

Table of Contents

AI Conversation Log LEEF Fields

The following table identifies the AI Conversation Log field names that the Log Forwarding app uses when you forward logs using the LEEF log format.

When you create a syslog forwarding profile , you can optionally create a profile token that the Log Forwarding app uses when it sends logs to the syslog server. If you configure a profile token, it appears in the log line immediately after the log type information (for example, TRAFFIC, THREAT, HIPMATCH, and so forth). The token will appear on a parameter called profileToken.

LEEF Name	Query Name	Field Type
Action	action.value	Custom
AppClassification	app_classification.value	Custom
AppID	app_id	Custom
AppName	app_name	Custom
Channel	channel.value	Custom
Content	content	Custom
ContentExtracted	content_extracted	Custom
ConversationID	conversation_id	Custom
CortexDataLakeTenantID	customer_id	Custom
DataSize	data_size	Custom
DLPDataProfiles	dlp_data_profiles	Custom
DLPIncidentID	dlp_incident_id	Custom
DLPTenantID	dlp_tenant_id	Custom
FileName	file_name	Custom
FileType	file_type	Custom
IsFileBased	is_file_based	Custom
IsPrompt	is_prompt	Custom
IsResponse	is_response	Custom
LogSource	log_source	Custom
LogSourceGroupID	log_source_group_id	Custom
DeviceSN	log_source_id	Custom
DeviceName	log_source_name	Custom
LogSourceTimeZoneOffset	log_source_tz_offset	Custom
TimeReceived	log_time	Custom
cat	log_type.value	Predefined
PlatformType	platform_type	Custom
PromptIntents	prompt_intents	Custom
PromptTopics	prompt_topics	Custom
ReportID	report_id	Custom
ScanRegion	scan_region	Custom
SessionKey	session_key	Custom
Snippets	snippets	Custom
Source	source.value	Custom
SubType	sub_type.value	Custom
devTime	time_generated	Predefined
TimeGeneratedHighResolution	time_generated_high_res	Custom
TSGID	tsg_id	Custom
URL	url	Custom
UserID	user_id	Custom
Vendor	vendor_name	Header
DLPVerdict	verdict.value	Custom

AI Conversation Log HTTPS Fields

AI Security Logs

Strata Logging Service Docs

AI Conversation Log LEEF Fields

Strata Logging Service Docs

AI Conversation Log LEEF Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner