This section describes the metadata fields that can appear in data queries and in the flow data sent to LogRhythm Enterprise.

All timestamps in metadata fields are Epoch time, but are converted to standard date format on the Analyst page.