Application Security EMAIL Fields

Table of Contents

Application Security EMAIL Fields

The following table identifies the Application Security field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
Action	action.value
Application	app
CortexDataLakeTenantID	customer_id
DestinationAddress	dest_ip.value
DestinationPort	dest_port
FQDNApplicationName	fqdn_app_name
InternalSourceAddress	internal_source_ip.value
LogSource	log_source
LogSourceGroupID	log_source_group_id
DeviceSN	log_source_id
DeviceName	log_source_name
LogSourceTimeZoneOffset	log_source_tz_offset
TimeReceived	log_time
LogType	log_type.value
PlatformType	platform_type
ApplicationSecurityPolicyRuleAdditionalDetails	policy_rule_additional_details
ApplicationSecurityPolicyRuleName	policy_rule_name
ApplicationSecurityPolicyRuleType	policy_rule_type.value
HTTPResponseCode	response_code
SessionID	session_id
SourceAddress	source_ip.value
SourcePort	source_port
SourceUser	source_user
Subtype	sub_type.value
TimeGenerated	time_generated
TimeGeneratedHighResolution	time_generated_high_res
TraceID	trace_id
TSGID	tsg_id
URL	url
VendorName	vendor_name

Application Security CEF Fields

Application Security HTTPS Fields

Strata Logging Service Docs

Application Security EMAIL Fields

Strata Logging Service Docs

Application Security EMAIL Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner