Application Security EMAIL Fields

Table of Contents

Application Security EMAIL Fields

The following table identifies the Application Security field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
TRUE	action.value
TRUE	app
FALSE	customer_id
TRUE	dest_ip.value
TRUE	dest_port
FALSE	fqdn_app_name
FALSE	internal_source_ip.value
FALSE	log_source
TRUE	log_source_group_id
TRUE	log_source_id
TRUE	log_source_name
FALSE	log_source_tz_offset
TRUE	log_time
LogType	log_type.value
TRUE	platform_type
FALSE	policy_rule_additional_details
FALSE	policy_rule_name
FALSE	policy_rule_type.value
FALSE	response_code
TRUE	session_id
TRUE	source_ip.value
TRUE	source_port
TRUE	source_user
TRUE	sub_type.value
TRUE	time_generated
TRUE	time_generated_high_res
FALSE	trace_id
FALSE	tsg_id
FALSE	url
TRUE	vendor_name

Application Security CEF Fields

Application Security HTTPS Fields

Strata Logging Service Docs

Application Security EMAIL Fields

Strata Logging Service Docs

Application Security EMAIL Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner