Troubleshooting (Prisma Access Agent) HTTPS Fields

Table of Contents

Troubleshooting (Prisma Access Agent) EMAIL Fields

Troubleshooting (Prisma Access Agent) LEEF Fields

Troubleshooting (Prisma Access Agent) HTTPS Fields

The following table identifies the Troubleshooting (Prisma Access Agent) field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
Action	action	string
AttemptedGateways	attempted_gateways	string
AuthMethod	auth_method	string
CloudReportID	cloud_reportid	string
ConfigVersion	config_version.value	string
ConnectionMethod	connect_method	string
ConnectionErrorID	connection_error.id	int
ConnectionError	connection_error.value	string
CountOfRepeats	count_of_repeats	int
TenantID	customer_id	string
DataProfileName	data_profile_name	string
DestType	dest_type.value	string
DGHierarchyLevel1	dg_hier_level_1	int
DGHierarchyLevel2	dg_hier_level_2	int
DGHierarchyLevel3	dg_hier_level_3	int
DGHierarchyLevel4	dg_hier_level_4	int
DLPClientVersion	dlp_client_version	string
EndpointDeviceName	endpoint_device_name	string
ZTNAClientVersion	endpoint_gp_version	int
EndpointOSType	endpoint_os_type	string
EndpointOSVersion	endpoint_os_version	string
EndpointSN	endpoint_serial_number	string
EventIDValue	event_id.value	string
FileName	file_name	string
FileSHA256	file_sha_256	string
FileSize	file_size	long
Gateway	gateway	string
GatewayPriority	gateway_priority.value	string
GatewaySelectionType	gateway_selection_type	string
ZTNAGatewayLocation	gpg_location	string
HostID	host_id	string
IncidentID	incident_id	string
IsDuplicateLog	is_dup_log	boolean
LogExported	is_exported	boolean
LogForwarded	is_forwarded	boolean
IsPrismaNetworks	is_prisma_branch	boolean
IsPrismaUsers	is_prisma_mobile	boolean
LogSource	log_source	string
LogSourceGroupID	log_source_group_id	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
LogSourceTimeZoneOffset	log_source_tz_offset	int
TimeReceived	log_time	timestamp
LogType	log_type.value	string
LoginDuration	login_duration	long
Description	opaque	string
PanoramaSN	panorama_serial	string
PeripheralAttributes	peripheral_attributes	string
PeripheralID	peripheral_id	string
PlatformType	platform_type	string
PolicyID	policy_id	string
PolicyName	policy_name	string
PolicyType	policy_type	string
PolicyVersion	policy_version	int
Portal	portal	string
PrivateIPv4	private_ip.value	ip
PrivateIPv6	private_ipv6.value	ip
ProjectName	project_name	string
PublicIPv4	public_ip.value	ip
PublicIPv6	public_ipv6.value	ip
QuarantineReason	quarantine_reason	string
ReasonPolicy	reason_policy	string
SequenceNo	sequence_no	long
Severity	severity.value	string
SourceRegion	source_region	string
SourceUserName	source_user	string
SourceUserInfoDomain	source_user_info.domain	string
SourceUserInfoName	source_user_info.name	string
SourceUserInfoUUID	source_user_info.uuid	long
SSLResponseTime	ssl_response_time	int
Stage	stage	string
EventStatus	status.value	string
LogSubtype	sub_type.value	string
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp_high_res
TunnelType	tunnel	string
VendorName	vendor_name	string
VirtualSystem	vsys	string
VirtualSystemID	vsys_id	int
VirtualSystemName	vsys_name	string

Troubleshooting (Prisma Access Agent) EMAIL Fields

Troubleshooting (Prisma Access Agent) LEEF Fields

Strata Logging Service Docs

Troubleshooting (Prisma Access Agent) HTTPS Fields

Strata Logging Service Docs

Troubleshooting (Prisma Access Agent) HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner