...
Introduction
Tags beginning with firewall.velocloud
identifies identify events generated by VMware VeloCloud.
Tag structure
The full tag must have 4 3 levels. The first two are fixed as authfirewall.
rsavelocloud
. The third level identifies the type of events sent, and the fourth level indicates the event subtype.
Product / Service | Tags | Data tables |
---|---|---|
VeloCloud Firewall |
|
|
Table structure
These are the fields displayed in this table:
firewall.velocloud.traffic
Field | Type | Field transformation | Source field name | Extra |
---|
fields | ||
---|---|---|
eventdate |
|
|
| |
host |
|
| vhost | |||
sid |
|
|
| |
sessionID |
|
|
id | ||
segmentObjectId |
|
|
| |
ruleLogicalId |
|
|
| |
interface |
|
|
| |
protocol |
|
|
| |
srcIp |
|
| sourceIp | |
srcPort |
|
| sourcePort | |
dstIp |
|
|
destIp | ||
dstPort |
|
|
destPort | ||
dest_name |
|
|
sdwanDestination | |
action |
|
|
| |
application |
|
|
| |
durationSecs |
|
|
| |
bytesSent |
|
|
| |
bytesReceived |
|
|
| ||
reason |
|
|
| ||
nat_src |
|
|
| |
nat_spt |
|
|
| |
svlan |
|
|
| |
dvlan |
|
|
| |||
dstDomain |
|
|
| |
fwPolicyName |
|
|
| |
eventName |
|
| reason protocol action | ||||
hostchain |
|
|
| ✓ | |
tag |
|
|
| ✓ | |
rawMessage |
|
|
|