Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

These are the fields displayed in this table:

av.fsecure.igk.access

Field

Type

Field transformation

Source field name

Extra fields

eventdate

timestamp

 

 

machine

str

 

vmachine

serverdate

timestamp

 

 

srcHost

str

 

 

srcIp

ip4

 

 

dstIp

ip4

 

 

service

str

 

 

detectResult

str

 

 

action

str

 

 

virus

str

 

 

method

str

 

 

url

str

 

 

user

str

 

 

requestStat

str

 

 

statusCode

int4

 

 

responseTime

int4

 

 

responseLength

int4

 

 

hierarchyStat

str

 

 

contentType

str

 

 

file

str

 

 

quarantine

str

 

 

intPid

int4

 

 

pid

int4

 

 

numFiles

int4

 

 

numChecks

int4

 

 

detectTime

int4

 

 

details

str

 

 

senderAddr

str

Code Block
(service = "smtp") ? data1 : null("")

service

data1

msgId

str

Code Block
(service = "smtp") ? data2 : null("")

service

data2

protoDetails

str

Code Block
(service = "http") ? data2 : null("")

service

data2

xForwardedFor

str

Code Block
(service = "http") ? data2 : null("")

service

data2

error

str

 

 

igk

str

 

 

hostchain

str

 

 

tag

str