Directory sync HTTPS Fields

Table of Contents

Directory sync HTTPS Fields

The following table identifies the Directory sync field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
TimeReceived	cie_log_time	timestamp
ClientApplicationId	client_application_id	string
Count	count	int
CountSummaryApplication	count_summary.application	int
CountSummaryComputer	count_summary.computer	int
CountSummaryContainer	count_summary.container	int
CountSummaryGroup	count_summary.group	int
CountSummaryOU	count_summary.ou	int
CountSummar RoleAssignments	count_summary.roleassignments	int
CountSummaryUser	count_summary.user	int
CortexDataLakeTenantId	customer_id	string
DirectoryId	directory_id	string
DirectoryName	directory_name	string
DirectoryType	directory_type	string
EventCategory	event_category	string
EventSequenceId	event_sequence_id	int
EventState	event_state	string
EventType	event_type	string
FailureReasonCode	failure_reason_code	string
FlattenedMembershipCountCIE	flattened_membership_count_cie	int
FlattenedMembershipCountCIEPreviousSync	flattened_membership_count_cie_previous_sync	int
FlattenedMembershipCountIDP	flattened_membership_count_idp	int
ImmediateMembershipCountCIE	immediate_membership_count_cie	int
ImmediateMembershipCountCIEPreviousSync	immediate_membership_count_cie_previous_sync	int
ImmediateMembershipCountIDP	immediate_membership_count_idp	int
LogSource	log_source	string
LogSourceGroupID	log_source_group_id	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
LogSourceTimeZoneOffset	log_source_tz_offset	int
TimeReceived	log_time	timestamp
LogType	log_type.value	string
PlatformType	platform_type	string
RecommendedAction	recommended_action	string
SourceId	source_id	string
SourceType	source_type	string
SubType	sub_type.value	string
SyncJobId	sync_job_id	string
SyncType	sync_type	string
TargetId	target_id	string
TargetType	target_type	string
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp
TSGID	tsg_id	string
VendorName	vendor_name	string

Directory sync EMAIL Fields

Directory sync LEEF Fields

Strata Logging Service Docs

Directory sync HTTPS Fields

Strata Logging Service Docs

Directory sync HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner