Skip to end of banner Go to start of banner

firewall.velocloud

Skip to end of metadata

Created by Former user, last modified by Juan Tomás Alonso Nieto on Sept 05, 2023

Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Introduction

Tags beginning with firewall.velocloud identifies events generated by VeloCloud.

Tag structure

The full tag must have 3 levels. The first two are fixed as firewall.velocloud. The third level identifies the type of events sent.

Product / Service	Tags	Data tables
VeloCloud Firewall	`firewall.velocloud.traffic`	`firewall.velocloud.traffic`

Table structure

These are the fields displayed in this table:

firewall.velocloud.traffic

Field	Type	Extra fields
eventdate	`timestamp`
host	`str`
sessionID	`int8`
segmentObjectId	`int8`
ruleLogicalId	`str`
interface	`str`
protocol	`str`
srcIp	`ip4`
srcPort	`int4`
dstIp	`ip4`
dstPort	`int4`
dest_name	`str`
action	`str`
application	`str`
durationSecs	`int8`
bytesSent	`int8`
bytesReceived	`int8`
reason	`str`
nat_src	`ip4`
nat_spt	`int4`
svlan	`str`
dvlan	`str`
eventName	`str`
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`

No labels