...
Tags beginning with firewall.velocloud
identifies identify events generated by VeloCloud.
...
The full tag must have 3 levels. The first two are fixed asfirewall.velocloud
. The third level identifies the type of events sent.
Product / Service | Tags | Data tables |
---|---|---|
VeloCloud Firewall |
|
|
Table structure
These are the fields displayed in this table:
firewall.velocloud.traffic
Field | Type | Field transformation | Source field name | Extra fields | ||
---|---|---|---|---|---|---|
eventdate |
|
|
| |||
host |
|
| vhost | |||
sid |
|
|
| |||
sessionID |
|
| id | |||
segmentObjectId |
|
|
| |||
ruleLogicalId |
|
|
| |||
interface |
|
|
| |||
protocol |
|
|
| |||
srcIp |
|
| sourceIp | |||
srcPort |
|
| sourcePort | |||
dstIp |
|
| destIp | |||
dstPort |
|
| destPort | |||
dest_name |
|
| sdwanDestination | |||
action |
|
|
| |||
application |
|
|
| |||
durationSecs |
|
|
| |||
bytesSent |
|
|
| |||
bytesReceived |
|
|
| |||
reason |
|
|
| |||
nat_src |
|
|
| |||
nat_spt |
|
|
| |||
svlan |
|
|
| |||
dvlan |
|
|
| |||
dstDomain |
|
|
| |||
fwPolicyName |
|
|
| |||
eventName |
|
| reason protocol action | |||
hostchain |
|
|
| ✓ | ||
tag |
|
|
| ✓ | ||
rawMessage |
|
|
|