Page Comparison

...

These are the fields displayed in this table:

Field	Type	Extra

Label

field	Source field name
eventdate	`timestamp`
hostname	`str`
priorityCode	`str`
cefTag	`str`
cefVersion	`str`
embDeviceVendor	`str`
embDeviceProduct	`str`
deviceVersion	`str`
signatureID	`str`
name	`str`
severity	`str`
_cefVer	`str`
cs3Label	`str`
msg	`str`
cs4Label	`str`
cs3	`str`
cs1	`str`
request	`str`
cs6	`str`
rt	`timestamp`
cs4	`str`
out	`int8`
cs2Label	`str`
cs5Label	`str`
cs2	`str`
src	`ip4`
act	`str`
cs5	`str`
in	`int8`
cs6Label	`str`
cs1Label	`str`
flexString1Label	`str`
sourceZoneID	`str`
dtz	`str`
slong	`str`
sourceGeoRegionCode	`str`
eventAnnotationAuditTrail	`str`
eventAnnotationVersion	`str`
eventAnnotationModificationTime	`str`
art	`str`
originalAgentAddress	`str`
eventId	`str`
sourceGeoPostalCode	`str`
at	`str`
mrt	`str`
customerURI	`str`
originalAgentZoneURI	`str`
sourceZoneURI	`str`
assetCriticality	`str`
eventAnnotationFlags	`str`
agt	`str`
sourceGeoCountryCode	`str`
modelConfidence	`str`
aid	`str`
amac	`str`
slat	`str`
Severity	`str`
relevance	`str`
av	`str`
eventAnnotationStageUpdateTime	`str`
flexString2	`str`
flexString2Label	`str`
locality	`str`
ahost	`str`
originalAgentVersion	`str`
customerID	`str`
atz	`str`
originalAgentMacAddress	`str`
originalAgentType	`str`
flexString1	`str`
originalAgentId	`str`
eventAnnotationManagerReceiptTime	`str`
originalAgentHostName	`str`
priority	`str`
eventAnnotationEndTime	`str`
sourceGeoLocationInfo	`str`
hostchain	`str`	✓
tag	`str`	✓	cefTag
rawMessage	`str`

Versions Compared