Field | Type | Extra fields |
---|
eventdate | timestamp
| |
hostname | str
| |
initiated_by__id | str
| |
initiated_by__type | str
| |
initiated_by__username | str
| |
error_message | str
| |
geoip__country_code | str
| |
geoip__timezone | str
| |
geoip__latitude | float8
| |
geoip__continent_code | str
| |
geoip__region_name | str
| |
geoip__longitude | float8
| |
geoip__region_code | str
| |
sso_token_success | bool
| |
auth_context__policies_applied | str
| |
auth_context__system__hostname | str
| |
auth_context__system__os | str
| |
auth_context__system__display_name | str
| |
auth_context__system__id | str
| |
auth_context__system__version | str
| |
mfa | bool
| |
event_type | str
| |
application__name | str
| |
application__id | str
| |
application__sso_url | str
| |
application__display_label | str
| |
provider | str
| |
service | str
| |
organization | str
| |
at_version | str
| |
client_ip | ip4
| |
idp_initiated | bool
| |
id | str
| |
user_agent__patch | str
| |
user_agent__os | str
| |
user_agent__minor | str
| |
user_agent__major | str
| |
user_agent__build | str
| |
user_agent__name | str
| |
user_agent__os_name | str
| |
user_agent__device | str
| |
timestamp_str | str
| |
timestamp | timestamp
| |
hostchain | str
| ✓ |
tag | str
| ✓ |
rawMessage | str
| ✓ |