Details
| ID | Menlo_Security_ModelingRule |
|---|---|
| From Version | 8.4.0 |
Schema
menlo_security_ip_raw
| Field | Type | Array? |
|---|---|---|
action |
string | — |
audit_actions |
string | — |
bytes |
int | — |
categories |
string | — |
ccl_ids |
string | — |
content_type |
string | — |
delivered_to |
string | — |
document_type |
string | — |
domain |
string | — |
dst |
string | — |
dst_from_port |
int | — |
dst_ip |
string | — |
dst_url |
string | — |
egress_ip |
string | — |
file_size |
string | — |
file_type |
string | — |
filename |
string | — |
from |
string | — |
hostname |
string | — |
message_id |
string | — |
name |
string | — |
next_hop_reason |
string | — |
origin_country |
string | — |
origin_ip |
string | — |
pe_action |
string | — |
pe_rulename |
string | — |
protocol |
string | — |
reason |
string | — |
referer |
string | — |
region |
string | — |
reply_to |
string | — |
request_type |
string | — |
response_code |
string | — |
risk_score |
string | — |
rule_name |
string | — |
sha256 |
string | — |
source_log_type |
string | — |
src_ip |
string | — |
src_port |
int | — |
sub_event_type |
string | — |
subject |
string | — |
threat_types |
string | — |
threats |
string | — |
to |
string | — |
uid |
string | — |
url |
string | — |
user_agent |
string | — |
userid |
string | — |
version |
string | — |
x_client_ip |
string | — |