GlobalProtect App Troubleshooting HTTPS Fields

Table of Contents

GlobalProtect App Troubleshooting EMAIL Fields

GlobalProtect App Troubleshooting LEEF Fields

GlobalProtect App Troubleshooting HTTPS Fields

The following table identifies the GlobalProtect App Troubleshooting field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
AppTampered	app_tampered	boolean
CaptivePortal	captive_portal	boolean
CPUUsage	cpu_usage	int
GlobalProtectCPUUsage	cpu_usage_gp	int
CrashHistory	crash_history	array
DebugLogFile	debug_log_file_name	string
DisableHistory	disable_history	array
DiskAvailable	disk_available	string
TotalDiskSpace	disk_total	string
DNSReachable	dns_reachable	boolean
DualStackTunnelInterface	dual_stack_network	boolean
EnforcerStatus	enforcer_status	string
ErrorMessage	error	string
ErrorDetails	error_details	string
ErrorStage	error_stage	string
ErrorGeneratedTime	error_time	timestamp
GlobalProtectMTU	gp_mtu	int
GlobalProtectVersion	gp_version	string
GatewayAddress	gw_address	string
AttemptedGateways	gw_attempted	array
GatewayAuthentication	gw_auth	array
GatewayConfigurationName	gw_config_name	string
DLSAstatus	gw_dlsa_enabled	boolean
FallbacktoSSLReason	gw_fall_back_to_ssl	string
IPSecEnabled	gw_ipsec_enabled	boolean
IPSecFailureReason	gw_ipsec_failure_reason	string
Jitter	gw_jitter	int
Latency	gw_latency	int
Location	gw_location	string
GatewayLogoutTime	gw_logout_time	timestamp
PacketLoss	gw_packet_loss	int
GatewayReachable	gw_reachable	boolean
GatewaySSLCertificateValid	gw_server_cert	boolean
SSLFailureReason	gw_ssl_failure_reason	string
GatewayStatus	gw_status	string
TunnelRename	gw_tunnel_renamed	boolean
Privileges	has_privileges	boolean
HostTimeOffset	host_gmt_timeoffset	int
HostID	host_id	string
Hostname	host_name	string
InstallHistory	install_history	string
InternalNetwork	internal_network	boolean
InternetAccess	internet_access	boolean
JailbrokenStatus	jail_broken	boolean
LastHIPReportTime	last_hip_report_time	timestamp
LastLogoutTime	last_logout_time	timestamp
Locale	locale	string
LogType	log_type.value	string
TotalMemory	memory_total	string
MemoryUsage	memory_usage	int
GlobalProtectMemoryUsage	memory_usage_gp	int
NetworkAccess	network_access	boolean
PortalGatewayLatency	network_latency	int
Type	network_type	string
OperatingSystem	os	string
PanoramaSN	panorama_serial	string
PortalAddress	portal_address	string
PortalAuthentication	portal_auth	array
CachedConfiguration	portal_cached_config	boolean
PortalConfigurationName	portal_config_name	string
ConfigurationRefresh	portal_config_refresh	boolean
LastConnectTime	portal_last_connect_time	timestamp
PortalReachable	portal_reachable	boolean
PortalSSLCertificateValid	portal_server_cert	boolean
PortalStatus	portal_status	string
ProxyServer	proxy_server	string
GeneratedTime	report_id	string
ReportID	report_time	timestamp
ReportType	report_type	string
SerialNumber	serial_number	string
ServerPerformance	server_performance	array
Split-tunnelconfiguration	split_tunnel_status	string
UserComment	user_comment	string
Username	user_name	string

GlobalProtect App Troubleshooting EMAIL Fields

GlobalProtect App Troubleshooting LEEF Fields

Strata Logging Service Docs

GlobalProtect App Troubleshooting HTTPS Fields

Strata Logging Service Docs

GlobalProtect App Troubleshooting HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner