Remote Browser Isolation CEF Fields
Focus
Focus
Strata Logging Service

Remote Browser Isolation CEF Fields

Table of Contents

Remote Browser Isolation CEF Fields

The following table identifies the Remote Browser Isolation field names that the Log Forwarding app uses when you forward logs using the CEF log format.
CEF Name
Field Details
Action
Query Name: action.​value
Header Type: Custom
BHName
Query Name: bh_name
Header Type: Custom
BrowserType
Query Name: browser_type
Header Type: Custom
ClientId
Query Name: client_id
Header Type: Custom
ClientIP
Query Name: client_ip.​value
Header Type: Custom
SessionDuration
Query Name: connected_duration
Header Type: Custom
CortexDataLakeTenantID
Query Name: customer_id
Header Type: Custom
DataSize
Query Name: data_size
Header Type: Custom
DisconnectReason
Header Type: Custom
EdgeLocation
Query Name: edge_location
Header Type: Custom
EventSeverity
Header Type: Custom
EventSubType
Header Type: Custom
EventType
Header Type: Custom
FileName
Query Name: file_name
Header Type: Custom
IssueDetails
Query Name: issue_details
Header Type: Custom
LogSource
Query Name: log_source
Header Type: Custom
LogSourceGroupID
Header Type: Custom
DeviceSN
Query Name: log_source_id
Header Type: Custom
DeviceName
Query Name: log_source_name
Header Type: Custom
TimeReceived
Query Name: log_time
Header Type: Custom
LogType
Query Name: log_type.​value
Header Type: Custom
OSType
Query Name: os_type
Header Type: Custom
PlatformType
Query Name: platform_type
Header Type: Custom
SubType
Query Name: sub_type.​value
Header Type: Custom
TimeGenerated
Query Name: time_generated
Header Type: Custom
TimeGeneratedHighResolution
Header Type: Custom
URL
Query Name: url
Header Type: Custom
SourceUser
Query Name: user_id
Header Type: Custom
VendorName
Query Name: vendor_name
Header Type: Custom