Page Comparison

...

Field	Type	Extra field	Source field name
eventdate	`timestamp`
source	`str`
_cefVer	`str`
fwname	`str`
act	`str`
app	`str`
cat	`str`
c6a4Label	`str`
deviceExternalId	`str`
deviceInboundInterface	`str`
deviceOutboundInterface	`str`
dst	`ip4`
dpt	`int4`
dvchost	`str`
in	`int8`
out	`int8`
proto	`str`
rt	`timestamp`
src	`ip4`
spt	`int4`
agt	`str`
ahost	`str`
art	`str`
atz	`str`
categoryBehavior	`str`
categoryDeviceGroup	`str`
categoryObject	`str`
categoryOutcome	`str`
categorySignificance	`str`
deviceSeverity	`str`
dtz	`str`
eventId	`str`
rawMessage	`str`	✓	rawSource
hostchain	`str`	✓
tag	`str`	✓

...

Versions Compared