Network

Domain (Impacted)

domainImpacted

The Impacted Windows of DNS referenced or impacted by log activity.

Domain (Origin)

domainOrigin

The domain from which a log message originated.

NAT TCP/UDP Port (Impacted)

NAT TCP/UDP Port (Origin)

impactedNatPort

originNatPort

The TCP/UDP port that was translated via NAT device logs:

• NAT TCP/UDP Port (Origin) is the source.

• NAT TCP/UDP Port (Impacted) is the destination.

Network (Impacted)

Network (Origin)

impactedNetwork

originNetwork

Network involved in the log activity:

• Network (Origin) is the source network.

• Network (Impacted) is the destination network.

Protocol

protocolName

Network protocol applicable to the log message.

Session

session

The user, system, or application session.

Session Type

sessionType

If a session code is already in use for TCP or UDP protocols, this field is used for a session type that could be ssh, console, etc. Upon the establishment of a network connection, a session type is defined for that connection.

TCP/UDP Port (Origin)

TCP/UDP Port (Impacted)

originPort

impactedPort

The TCP or UDP port number:

• TCP/UDP Port (Origin) is the source.

• TCP/UDP Port (Impacted) is the destination.

URL

url

URL referenced or impacted by the log activity.

User Agent

userAgent

A unique string which identifies the browser or application and provides system specific details to servers hosting visited websites.