Application Security HTTPS Fields

Table of Contents

Application Security HTTPS Fields

The following table identifies the Application Security field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
Action	action.value	string
Application	app	string
CortexDataLakeTenantID	customer_id	string
DestinationAddress	dest_ip.value	string
DestinationPort	dest_port	int
FQDNApplicationName	fqdn_app_name	string
InternalSourceAddress	internal_source_ip.value	string
LogSource	log_source	string
LogSourceGroupID	log_source_group_id	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
LogSourceTimeZoneOffset	log_source_tz_offset	int
TimeReceived	log_time	timestamp
LogType	log_type.value	string
PlatformType	platform_type	string
ApplicationSecurityPolicyRuleAdditionalDetails	policy_rule_additional_details	string
ApplicationSecurityPolicyRuleName	policy_rule_name	string
ApplicationSecurityPolicyRuleType	policy_rule_type.value	string
HTTPResponseCode	response_code	int
SessionID	session_id	int
SourceAddress	source_ip.value	string
SourcePort	source_port	int
SourceUser	source_user	string
Subtype	sub_type.value	string
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp
TraceID	trace_id	string
TSGID	tsg_id	string
URL	url	string
VendorName	vendor_name	string

Application Security EMAIL Fields

Application Security LEEF Fields

Strata Logging Service Docs

Application Security HTTPS Fields

Strata Logging Service Docs

Application Security HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner