>
    Strata Copilot
    Audit HTTPS Fields
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Logging Service
    3. Strata Logging Service Log Reference
    4. Common Logs
    5. Audit
    6. Audit HTTPS Fields
    Download PDF
    Strata Logging Service

    Audit HTTPS Fields

    Table of Contents

    Audit HTTPS Fields

    The following table identifies the Audit field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
    HTTPS Name
    Query Name
    Field Type
    ActorDisplayName
    actor_display_name
    string
    ActorID
    actor_id
    string
    ConnectionErrorID
    connection_error.​id
    int
    ConnectionErrorValue
    connection_error.​value
    string
    CortexDataLakeTenantID
    customer_id
    string
    EventCategory
    event_category
    string
    EventClientIP
    event_client_ip.​value
    string
    EventDescription
    event_description
    string
    EventDestination
    event_dest.​value
    string
    EventDestinationAction
    event_dest_action
    string
    EventDestinationURL
    event_dest_url
    string
    EventDestinationUserUserID
    event_dest_user.​user_id
    string
    EventDestinationUserUUID
    event_dest_user.​uuid
    string
    DestinationVendor
    event_dest_vendor
    string
    EventDetails
    event_detail
    string
    EventID
    event_id
    string
    EventName
    event_name
    string
    EventResult
    event_result
    string
    EventSource
    event_source.​value
    string
    EventSourceURL
    event_source_url
    string
    EventSourceUserDomain
    event_source_user.​domain
    string
    EventSourceUser
    event_source_user.​user
    string
    EventSourceUserUserID
    event_source_user.​user_id
    string
    EventSourceUserUUID
    event_source_user.​uuid
    string
    EventSourceUserEmail
    event_source_user_email
    string
    EventSourceUserFirstName
    event_source_user_first_name
    string
    EventSourceUserLastName
    event_source_user_last_name
    string
    EventSourceUserUUIDV4
    event_source_user_uuid_v4
    string
    EventSubCategory
    event_sub_category
    string
    EventTime
    event_time
    timestamp
    LogSource
    log_source
    string
    LogSourceGroupID
    log_source_group_id
    string
    DeviceSN
    log_source_id
    string
    DeviceName
    log_source_name
    string
    LogSourceTimeZoneOffset
    log_source_tz_offset
    int
    TimeReceived
    log_time
    timestamp
    LogType
    log_type.​value
    string
    PlatformType
    platform_type
    string
    Subtype
    sub_type.​value
    string
    TSGID
    tsg_id
    string
    Vendor
    vendor_name
    string
    VendorSeverity
    vendor_severity.​value
    string

    © 2026 Palo Alto Networks, Inc. All rights reserved.