Network
Web Console Display Name | Lucene Search Syntax | Field Description |
---|---|---|
Domain (Impacted) | domainImpacted | The Impacted Windows of DNS referenced or impacted by log activity. |
Domain (Origin) | domainOrigin | The domain from which a log message originated. |
NAT TCP/UDP Port (Impacted) NAT TCP/UDP Port (Origin) | impactedNatPort originNatPort | The TCP/UDP port that was translated via NAT device logs:
|
Network (Impacted) Network (Origin) | impactedNetwork originNetwork | Network involved in the log activity:
|
Protocol | protocolName | Network protocol applicable to the log message. |
Session | session | The user, system, or application session. |
Session Type | sessionType | If a session code is already in use for TCP or UDP protocols, this field is used for a session type that could be ssh, console, etc. Upon the establishment of a network connection, a session type is defined for that connection. |
TCP/UDP Port (Origin) TCP/UDP Port (Impacted) | originPort impactedPort | The TCP or UDP port number:
|
URL | url | URL referenced or impacted by the log activity. |
User Agent | userAgent | A unique string which identifies the browser or application and provides system specific details to servers hosting visited websites. |