Authentication HTTPS Fields

Table of Contents

Authentication HTTPS Fields

The following table identifies the Authentication field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
AuthenticationDescription	auth_description	string
AuthEvent	auth_event_name.value	string
AuthFactorNo	auth_factor_num	int
AuthenticationPolicy	auth_policy	string
AuthenticationProtocol	auth_proto	int
AuthServerProfile	auth_server_profile	string
AuthenticatedUserDomain	authenticated_user_info.domain	string
AuthenticatedUserName	authenticated_user_info.name	string
AuthenticatedUserUUID	authenticated_user_info.uuid	long
ClientType	client_type	int
ClientTypeName	client_type_name.value	string
ConfigVersion	config_version.value	string
RepeatCount	count_of_repeats	int
CortexDataLakeTenantID	customer_id	string
DGHierarchyLevel1	dg_hier_level_1	int
DGHierarchyLevel2	dg_hier_level_2	int
DGHierarchyLevel3	dg_hier_level_3	int
DGHierarchyLevel4	dg_hier_level_4	int
IsDuplicateLog	is_dup_log	boolean
LogExported	is_exported	boolean
LogForwarded	is_forwarded	boolean
IsPrismaNetworks	is_prisma_branch	boolean
IsPrismaUsers	is_prisma_mobile	boolean
Location	location	string
LogSetting	log_set	string
LogSource	log_source	string
LogSourceGroupID	log_source_group_id	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
LogSourceTimeZoneOffset	log_source_tz_offset	int
TimeReceived	log_time	timestamp
LogType	log_type.value	string
MFAAuthenticationID	mfa_auth_id	long
MFAVendor	mfa_vendor	string
NormalizeUser	normalize_user	string
Object	object	string
PanoramaSN	panorama_serial	string
PlatformType	platform_type	string
Rule	rule_matched	string
RuleUUID	rule_matched_uuid	string
SequenceNo	sequence_no	long
AuthCacheServiceRegion	service_region	string
SessionID	session_id	int
SourceDeviceCategory	source_device_category	string
SourceDeviceHost	source_device_host	string
SourceDeviceMac	source_device_mac	string
SourceDeviceModel	source_device_model	string
SourceDeviceOSFamily	source_device_osfamily	string
SourceDeviceOSVersion	source_device_osversion	string
SourceDeviceProfile	source_device_profile	string
SourceDeviceVendor	source_device_vendor	string
SourceIP	source_ip.value	ip
Subtype	sub_type.value	string
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp_high_res
User	user	string
UserAgentString	user_agent	string
VendorName	vendor_name	string
VirtualLocation	vsys	string
VirtualSystemID	vsys_id	int
VirtualSystemName	vsys_name	string

Authentication EMAIL Fields

Authentication LEEF Fields

Strata Logging Service Docs

Authentication HTTPS Fields

Strata Logging Service Docs

Authentication HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner