AI Security HTTPS Fields

Table of Contents

The following table identifies the AI Security field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
Action	action	string
AIIncidentReportID	ai_incident_report_id	string
AIIncidentSubtype	ai_incident_subtype	string
AIIncidentType	ai_incident_type	string
AIModelCSPName	ai_model_csp_name	string
AIModelCSPRegionName	ai_model_csp_region_name	string
AIModelName	ai_model_name	string
AISecurityProfileName	ai_security_profile_name	string
AISubtypeDetails	ai_subtype_details	string
CortexDataLakeTenantID	customer_id	string
DestinationAddress	dest_ip.value	ip
dstPort	dest_port	int
KubernetesClusterID	k8s_cluster_id	int
Latency	latency	int
LogSource	log_source	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
TimeReceived	log_time	timestamp
LogType	log_type.value	string
MaxLatencyHit	max_latency_hit	boolean
PlatformType	platform_type	string
DestinationPort	protocol.value	string
ThreatinRequestorResponse	request_response	string
SessionID	session_id	int
SessionStartTime	session_start_time	timestamp
SourceAddress	source_ip.value	ip
SourcePort	source_port	int
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp
TSGID	tsg_id	string
VendorName	vendor_name	string
VendorSeverity	vendor_severity.value	string