Page Comparison

Versions Compared

Old Version 1

changes.mady.by.user Juan Tomás Alonso Nieto

Saved on May 22, 2023

compared with

New Version Current

changes.mady.by.user Juan Tomás Alonso Nieto

Saved on May 22, 2023

Key

This line was added.
This line was removed.
Formatting was changed.

...

cloud.aws.firewall.alert
cloud.aws.firewall.netflow

Anchor
tag1
tag1
cloud.aws.firewall.alert

Field	Type	Extra fields
eventdate	`timestamp`
hostname	`str`
ACCID	`str`
REGION	`str`
firewall_name	`str`
availability_zone	`str`
event_timestamp	`str`
event__timestamp	`str`
event__flow_id	`int8`
event__event_type	`str`
event__src_ip	`ip4`
event__src_port	`int4`
event__dest_ip	`ip4`
event__dest_port	`int4`
event__proto	`str`
event__tx_id	`int4`
event__alert__action	`str`
event__alert__signature_id	`int4`
event__alert__rev	`int4`
event__alert__signature	`str`
event__alert__category	`str`
event__alert__severity	`int4`
event__http__hostname	`str`
event__http__url	`str`
event__http__http_user_agent	`str`
event__http__http_method	`str`
event__http__protocol	`str`
event__http__length	`int4`
event__app_proto	`str`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓

Anchor
tag2
tag2
cloud.aws.firewall.netflow

Field	Type	Extra fields
eventdate	`timestamp`
hostname	`str`
ACCID	`str`
REGION	`str`
firewall_name	`str`
availability_zone	`str`
event_timestamp	`str`
event__timestamp	`str`
event__flow_id	`int8`
event__event_type	`str`
event__src_ip	`ip4`
event__src_port	`int4`
event__dest_ip	`ip4`
event__dest_port	`int4`
event__proto	`str`
event__netflow__pkts	`int4`
event__netflow__bytes	`int4`
event__netflow__start	`str`
event__netflow__end	`str`
event__netflow__age	`int4`
event__netflow__min_ttl	`int4`
event__netflow__max_ttl	`int4`
event__tcp__tcp_flags	`str`
event__tcp__syn	`bool`
event__tcp__ecn	`bool`
event__tcp__cwr	`bool`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	✓