Skip to main content
Skip table of contents


The recipient of an email or called to number for a VoIP log.

Data Type




Client Console Full Name


Client Console Short Name

Not applicable

Web Console Tab/Name


Elasticsearch Field Name


Rule Builder Column Name


Regex Pattern


NetMon Name

Not applicable

Field Relationships

  • Sender
  • Subject
  • Session
  • Session Type

Common Applications

  • Email logs
  • VoIP logs
  • Instant messaging services

Use Case

Tracking malware infection vector.

MPE/Data Masking Manipulations

Mapped to Recipient Identity.

Usage Standards

  • Recipient shall not be used for identifying the direction of network traffic or network zones.
  • Only used for destination email, destination caller, chat, instant messaging, or other communication mediums, such as
    • AOL Instant Messenger
    • IRC
    • Lync
    • Skype
    • Google Hangouts
    • Fax


  • ColdFusion Mailsent Log

"Information","scheduler-2","12/28/11","09:14:33",,"Mail: 'Web site submission from Pete Store' From:'' To:'' was successfully sent using"

To email parsed appropriately.

  • Cisco Telepresence Video Communications Server

04 26 2016 16:40:14 <USER:NOTE> 2016-04-26T16:40:14-04:00 radvcsx tvcs: Event="Call Attempted" Service="SIP" Src-ip="" Src-port="1196" Src-alias-type="SIP" Src-alias="" Dst-alias-type="SIP" Dst-alias="sip:dpackl@Host5" Call-serial-number="d415c222-fd22-47fd-8d0a-222b1a351460" Tag="02e3b418-f67b-408b-22b2-adafea222e32" Protocol="TLS" Auth="NO" Level="1" UTCTime="2016-04-26 20:40:14,467"

Dst-Alias in this case a VoIP call destination.

  • Cisco Unified Comm Mgr (Call Mgr)

05 22 2012 15:05:49 <LOC7:WARN> 750: May 22 2012 20:05:49.41 UTC :  %UC_CALLMANAGER-4-MaliciousCall: %[Called Party Number=2755][Called Device Name= USABLDRRECFLOW01][Called Display Name=Jason Riggins][Calling Party Number=2378][Calling Device Name= USABLDRRECFLOW01][Calling Display Name=Dave Store Test][App ID=Cisco CallManager][Cluster ID=StandAloneCluster][Node ID=KaM-CCM2-SubT]: A malicious call has been identified

Another VoIP call destination.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.