Fortinet FortiGate Modeling Rule

Modeling Rule

FortiGate

Details

IDFortinet_FortiGate_modeling_rule
From Version6.10.0
TagsFortinetFortiGate

Schema

fortinet_fortigate_raw

Field Type Array?
FTNTFGTCRlevel string
FTNTFGTadgroup string
FTNTFGTap string
FTNTFGTapp string
FTNTFGTappcat string
FTNTFGTappid string
FTNTFGTapplist string
FTNTFGTapprisk string
FTNTFGTapsn string
FTNTFGTassigned string
FTNTFGTassignip string
FTNTFGTattack string
FTNTFGTattackid string
FTNTFGTauditreporttype string
FTNTFGTbanned_src string
FTNTFGTbssid string
FTNTFGTcat string
FTNTFGTcatdesc string
FTNTFGTccertissuer string
FTNTFGTcfgattr string
FTNTFGTcfgobj string
FTNTFGTcfgpath string
FTNTFGTcipher string
FTNTFGTcommand string
FTNTFGTcveid string
FTNTFGTdaddr string
FTNTFGTdevintfname string
FTNTFGTdevtype string
FTNTFGTdhcp_msg string
FTNTFGTdst_host string
FTNTFGTdstauthserver string
FTNTFGTdstcity string
FTNTFGTdstcountry string
FTNTFGTdstdevtype string
FTNTFGTdstfamily string
FTNTFGTdsthwvendor string
FTNTFGTdsthwversion string
FTNTFGTdstmac string
FTNTFGTdstosname string
FTNTFGTdstregion string
FTNTFGTdstunauthuser string
FTNTFGTdstuser string
FTNTFGTduration string
FTNTFGTerror string
FTNTFGTerror_num string
FTNTFGTeventtype string
FTNTFGTfctuid string
FTNTFGTfilehash string
FTNTFGTfiletype string
FTNTFGTforwardedfor string
FTNTFGTgateway string
FTNTFGTgroup string
FTNTFGThttpcode string
FTNTFGThttpmethod string
FTNTFGTicmpcode string
FTNTFGTicmptype string
FTNTFGTincidentserialno string
FTNTFGTinitiator string
FTNTFGTinvalidmac string
FTNTFGTipaddr string
FTNTFGTlease string
FTNTFGTlevel string
FTNTFGTlocal string
FTNTFGTlogdesc string
FTNTFGTlogid string
FTNTFGTlogin string
FTNTFGTmanuf string
FTNTFGTmasterdstmac string
FTNTFGTmastersrcmac string
FTNTFGTmethod string
FTNTFGTnat string
FTNTFGTnew_status string
FTNTFGTnew_value string
FTNTFGTnewvalue string
FTNTFGTold_status string
FTNTFGTold_value string
FTNTFGToldvalue string
FTNTFGToldwprof string
FTNTFGTopercountry string
FTNTFGTosname string
FTNTFGTpdstport int
FTNTFGTpolicy_id string
FTNTFGTpolicyid string
FTNTFGTpolicyname string
FTNTFGTpoolname string
FTNTFGTprofile string
FTNTFGTpsrcport int
FTNTFGTqclass string
FTNTFGTqname string
FTNTFGTqtype string
FTNTFGTrcvdpkt string
FTNTFGTref string
FTNTFGTreferralurl string
FTNTFGTremote string
FTNTFGTreporttype string
FTNTFGTresult string
FTNTFGTsaddr string
FTNTFGTscertcname string
FTNTFGTscertissuer string
FTNTFGTsentpkt string
FTNTFGTserialno string
FTNTFGTserver string
FTNTFGTseverity string
FTNTFGTshapingpolicyid string
FTNTFGTsn string
FTNTFGTsnclosest string
FTNTFGTsrccity string
FTNTFGTsrccountry string
FTNTFGTsrcfamily string
FTNTFGTsrchwvendor string
FTNTFGTsrchwversion string
FTNTFGTsrcmac string
FTNTFGTsrcregion string
FTNTFGTsrcuuid string
FTNTFGTsslaction string
FTNTFGTstamac string
FTNTFGTsubtype string
FTNTFGTtamac string
FTNTFGTthreattype string
FTNTFGTtlsver string
FTNTFGTtrueclntip string
FTNTFGTtunnelid string
FTNTFGTtunnelip string
FTNTFGTunauthuser string
FTNTFGTutmaction string
FTNTFGTvd string
FTNTFGTvirus string
FTNTFGTviruscat string
FTNTFGTvirusid string
FTNTFGTvoip_proto string
FTNTFGTvpntunnel string
FTNTFGTvulncat string
FTNTFGTvulnid string
FTNTFGTvulnname string
FTNTFGTxauthgroup string
FTNTFGTxauthuser string
FTNTFGinitiator string
_id string
_product string
_raw_log string
_vendor string
act string
app string
c6a2 string
c6a3 string
cat string
cefDeviceVersion string
cefSeverity string
deviceExternalId string
deviceInboundInterface string
deviceOutboundInterface string
dhost string
dpt int
dst string
duser string
dvchost string
externalID string
externalId string
fname string
fsize string
in string
msg string
out string
outcome string
proto string
reason string
request string
requestClientApplication string
requestContext string
shost string
sourceTranslatedAddress string
sourceTranslatedPort int
sproc string
spt int
src string
suser string
fromversion: 6.10.0
id: Fortinet_FortiGate_modeling_rule
name: Fortinet FortiGate Modeling Rule
rules: ''
schema: ''
tags: FortinetFortiGate
supportedModules:
- xsiam