Details
| ID | Netskope_Modeling_Rule |
|---|---|
| From Version | 6.10.0 |
| Tags | netskope |
Schema
netskope_netskope_raw
| Field | Type | Array? |
|---|---|---|
access_method |
string | — |
account_id |
string | — |
action |
string | — |
activity |
string | — |
activity_status |
string | — |
activity_type |
string | — |
alert |
string | — |
alert_name |
string | — |
alert_type |
string | — |
app |
string | — |
app_session_id |
string | — |
audit_log_event |
string | — |
browser |
string | — |
browser_session_id |
int | — |
category |
string | — |
ccl |
string | — |
client_bytes |
int | — |
conn_duration |
int | — |
details |
string | — |
device |
string | — |
dom |
string | — |
domain |
string | — |
dst_country |
string | — |
dst_latitude |
string | — |
dst_location |
string | — |
dst_longitude |
string | — |
dst_region |
string | — |
dst_timezone |
string | — |
dsthost |
string | — |
dstip |
string | — |
dstport |
int | — |
event_type |
string | — |
file_path |
string | — |
file_type |
string | — |
filename |
string | — |
hostname |
string | — |
incident_id |
string | — |
instance_id |
string | — |
ip_protocol |
string | — |
local_md5 |
string | — |
local_sha256 |
string | — |
malware_name |
string | — |
malware_severity |
string | — |
malware_type |
string | — |
managed_app |
string | — |
md5 |
string | — |
object |
string | — |
object_type |
string | — |
organization_unit |
string | — |
os |
string | — |
os_version |
string | — |
page |
string | — |
protocol |
string | — |
referer |
string | — |
region_name |
string | — |
request_id |
int | — |
risk_level |
string | — |
server_bytes |
int | — |
session_duration |
int | — |
severity |
string | — |
severity_level |
int | — |
sha256 |
string | — |
site |
string | — |
source_log_event |
string | — |
src_country |
string | — |
src_latitude |
string | — |
src_location |
string | — |
src_longitude |
string | — |
src_region |
string | — |
src_timezone |
string | — |
srcip |
string | — |
srcport |
int | — |
supporting_data |
string | — |
timestamp |
int | — |
title |
string | — |
total_packets |
int | — |
traffic_type |
string | — |
type |
string | — |
ur_normalized |
string | — |
url |
string | — |
user |
string | — |
user_id |
string | — |
useragent |
string | — |
userip |
string | — |
userkey |
string | — |
web_url |
string | — |