SD-WAN Traffic HTTPS Fields

Table of Contents

SD-WAN Traffic HTTPS Fields

The following table identifies the SD-WAN Traffic field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.

HTTPS Name	Query Name	Field Type
Action	action.value	string
Application	app	string
ApplicationCategory	app_category	string
ApplicationSubcategory	app_sub_category	string
BytesReceived	bytes_received	long
BytesSent	bytes_sent	long
ApplicationCharacteristics	characteristics_of_app	array
ApplicationContainer	container_of_app	string
CortexDataLakeTenantId	customer_id	string
DestinationIP	dest_ip.value	string
DestinationPort	dest_port	int
DestinationUserInfoDomain	dest_user_info.domain	string
DestinationUserInfoName	dest_user_info.name	string
DestinationUserInfoUUID	dest_user_info.uuid	long
FromZone	from_zone	string
InboundInterface	inbound_if.value	string
IsClienttoServer	is_client_to_server	boolean
IsIPV6	is_ipv6	boolean
IsSaaSApplication	is_saas_app	boolean
LogSource	log_source	string
LogSourceGroupID	log_source_group_id	string
DeviceSN	log_source_id	string
DeviceName	log_source_name	string
LogSourceTimeZoneOffset	log_source_tz_offset	int
TimeReceived	log_time	timestamp
LogType	log_type.value	string
EgressInterface	outbound_if.value	string
PacketsReceived	packets_received	int
PacketsSent	packets_sent	int
PathValue	path.value	string
PathLabel	path_label	string
PlatformType	platform_type	string
SDWANElementId	prisma_sdwan_element_id	string
SDWANElementName	prisma_sdwan_element_name	string
SDWANSiteId	prisma_sdwan_site_id	string
SDWANSiteName	prisma_sdwan_site_name	string
SDWANTenantId	prisma_sdwan_tenant_id	string
IPProtocol	protocol.value	string
ApplicationRisk	risk_of_app	int
SecurityRule	rule_matched	string
RuleUUID	rule_matched_uuid	string
SanctionedStateOfApp	sanctioned_state_of_app	boolean
SessionEndReason	session_end_reason.value	string
SessionID	session_id	int
SessionStartTime	session_start_time	timestamp
SourceDeviceCategory	source_device_category	string
SourceDeviceClass	source_device_class	string
SourceDeviceHost	source_device_host	string
SourceDeviceMac	source_device_mac	string
SourceDeviceModel	source_device_model	string
SourceDeviceOS	source_device_os	string
SourceDeviceOSFamily	source_device_osfamily	string
SourceDeviceOSVersion	source_device_osversion	string
SourceDeviceProfile	source_device_profile	string
SourceDeviceVendor	source_device_vendor	string
SourceIP	source_ip.value	string
SourcePort	source_port	int
SourceUser	source_user	string
SourceUserInfoDomain	source_user_info.domain	string
SourceUserInfoName	source_user_info.name	string
SourceUserInfoUUID	source_user_info.uuid	long
SubType	sub_type.value	string
ApplicationTechnology	technology_of_app	string
TimeGenerated	time_generated	timestamp
TimeGeneratedHighResolution	time_generated_high_res	timestamp
ToZone	to_zone	string
SessionDuration	total_time_elapsed	int
TrafficClass	traffic_class	string
TSGID	tsg_id	string
URLCategory	url_category.value	string
VendorName	vendor_name	string

SD-WAN Traffic EMAIL Fields

SD-WAN Traffic LEEF Fields

Strata Logging Service Docs

SD-WAN Traffic HTTPS Fields

Strata Logging Service Docs

SD-WAN Traffic HTTPS Fields

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner