Parsing fields for the size in bytes of the object described in the log.
-
bitsin
-
bitsout
-
bytesin
-
bytesout
-
kilobitsin
-
kilobitsout
-
kilobytesin
-
kilobytesout
-
megabitsin
-
megabitsout
-
megabytein
-
megabyteout
-
gigabitsin
-
gigabitsout
-
gigabytein
-
gigabyteout
-
terabitsin
-
terabitsout
-
terabytesin
-
terabytesout
-
petabitsin
-
petabitsout
-
petabytesin
-
petabytesout
Data Type
Double
Aliases
|
Use |
Alias |
|---|---|
|
Client Console Full Name |
Various |
|
Client Console Short Name |
Various |
|
Web Console Tab/Name |
Various |
|
OpenSearch Field Name |
Various |
|
Rule Builder Column Name |
Various |
|
Regex Pattern |
Various |
|
NetMon Name |
Various |
Field Relationships
Kbytes tab in the Web Console.
Common Applications
-
Network flows
-
File sizes
Use Case
Anything measurable in terms of bytes/bits.
MPE/Data Masking Manipulations
Normalized to bytes.
Usage Standards
-
Only use once per log (enforced by Super User console).
-
Use whichever prefex is the best possible match and let the MPE do the conversion.
Examples
-
SQLServer 2012 Error Log
2013-08-01 14:13:23.35 Server Detected 3839 MB of RAM. This is an informational message; no user action is required.
Parse 3839 into MegaBytes.
-
Adtran Switch
05 10 2014 22:23:57 1.1.1.1 <KERN:INFO> May 10 22:23:54 bbq22222 FIREWALL: id=firewall time="2014-05-10 22:23:54" fw=BBQ2222 pri=6 rule=23 proto=53/udp src=1.1.1.1 dst=1.1.1.1 msg="Connection timed out.Bytes transferred : 228 Src 62725 Dst 53 from Private policy-class on interface vlan 1" agent=AdFirewall
Indicating 228 bytes transferred out.
-
BlackBerry Enterprise Server
<2013-03-28 15:32:39.268 EDT>:[20945]:<BBQ-BES01_1>:<INFO >:<LAYER = IPPP, DEVICEPIN = 2ab20a5d, DOMAINNAME = USABLDRRECFLOW01, CONNECTION_TYPE = DEVICE_CONN, ConnectionId = 1374706373, DURATION(ms) = 7465, MFH_KBytes = 3.479, MTH_KBytes = 2.946, MFH_PACKET_COUNT = 7, MTH_PACKET_COUNT = 5>
MFH is Kbytesout MTH is KBytesIn.