firewall.velocloud

Introduction

Tags beginning with firewall.velocloud identifies events generated by VMware.

Tag structure

The full tag must have 4 levels. The first two are fixed as auth.rsa. The third level identifies the type of events sent, and the fourth level indicates the event subtype.

Product / Service	Tags	Data tables
VeloCloud	`firewall.velocloud.traffic`	`firewall.velocloud.traffic`

Table structure

These are the fields displayed in this table:

[firewall.velocloud.traffic]

firewall.velocloud.traffic

Field	Type	Extra Field
eventdate	`timestamp`	-
host	`str`	-
sessionID	`int8`	-
segmentObjectId	`int8`	-
ruleLogicalId	`str`	-
interface	`str`	-
protocol	`str`	-
srcIp	`ip4`	-
srcPort	`int4`	-
dstIp	`ip4`	-
dstPort	`int4`	-
dest_name	`str`	-
action	`str`	-
application	`str`	-
durationSecs	`int8`	-
bytesSent	`int8`	-
bytesReceived	`int8`	-
reason	`str`	-
nat_src	`ip4`	-
nat_spt	`int4`	-
svlan	`str`	-
dvlan	`str`	-
eventName	`str`	-
hostchain	`str`	✓
tag	`str`	✓
rawMessage	`str`	-