Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The tags beginning with vpn.aws identify events generated by Amazon Web Services belonging to aws.

...

Valid tags and data tables

The full tag must have two 3 levels. The first two are fixed asvpn.aws. The third level identifies the type of events sent. The fourth level indicates the event subtype.

These are the valid tags and corresponding data tables that will receive the parsers' data:

...

These are the fields displayed in this table:

Field

Type

Extra fields

eventdate

timestamp

hostname

str

connection_log_type

str

connection_attempt_status

str

connection_attempt_failure_reason

str

connection_id

str

client_vpn_endpoint_id

str

transport_protocol

str

connection_start_time

timestamp

connection_last_update_time

timestamp

client_ip

ip4

username

str

device_type

str

device_ip

ip4

port

str

ingress_bytes

str

egress_bytes

str

ingress_packets

str

egress_packets

str

connection_end_time

timestamp

connection_reset_status

str

connection_duration_seconds

str

hostchain

str

tag

str

rawMessage

str