Local Port
If the alert triggered on network activity (the Event Type is Network Connection) this is the port on the endpoint that triggered the alert. If not, then N/A.
Core Alert Fields multiSelect
Details
| ID | incident_localport |
|---|---|
| CLI Name | localport |
| Type | multiSelect |
| Version | -1 |
| Required | No |
| Read Only | No |
| Use as KPI | No |
| Searchable | No |