Vendor Field Map¶

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, datasize, sent_datasize, received_datasize, packet, start_ts, duration, category, FUTURE_USE, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, sent_packet, received_packet, reason, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, action_source, source_vm_uuid, destination_vm_uuid, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, sctp_association_id, chunk_count, sent_chunk, received_chunk

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, url, threat_id, category, severity, direction, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, content_type, pcap_id, checksum, wildfire_cloud, url_index, user_agent, file_type, x_forwarded_for, referer, sender, subject, receiver, report_id, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, FUTURE_USE, source_vm_uuid, destination_vm_uuid, request_method, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, threat_category, version, FUTURE_USE, sctp_association_id, payload_protocol_id, header

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_host, virtual_system, command, admin, client, result, path, before_change_detail, after_change_detail, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, event_id, object, FUTURE_USE, FUTURE_USE, module, severity, description, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, user, virtual_system, machine, os, source_address, match, repeat_count, match_type, FUTURE_USE, FUTURE_USE, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system, host, virtual_system_id, ipv6_source_address, host_id

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, user, virtual_system, category, severity, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, object, object_id, description

FUTURE_USER, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user, user_id, event_id, repeat_count, timeout, source_port, destination_port, source, source_type, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, vendor, authentication_ts, factor_number, FUTURE_USE, FUTURE_USE

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, severity, sequence_number, action_flag, source_location, destination_location, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, datasize, sent_datasize, received_datasize, packet, sent_packet, maximum_encapsulation_count, unknown_protocol_count, strict_check_count, tunnel_fragment_count, create_session_count, closed_session_count, reason, action_source, start_ts, duration, tunnel_inspection_rule

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user, normalized_user, object, authentication_policy, repeat_count, authentication_id, vendor, log_profile, server_profile, description, client_type, event_type, factor_number, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, authentication_protocol

FUTURE_USE, receive_ts, serial_number, FUTURE_USE, FUTURE_USE, FUTURE_USE, log_ts, source_address, destination_address, FUTURE_USE, FUTURE_USE, rule, FUTURE_USE, FUTURE_USE, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, FUTURE_USE, source_port, destination_port, FUTURE_USE, FUTURE_USE, FUTURE_USE, protocol, action, event_type, isdn, access_point, radio_access_technology, message_type, subscriber_address, tunnel_endpoint_identifier_1, tunnel_endpoint_identifier_2, gtp_interface, status_code, severity, country_code, network_code, area_code, cell_id, event_code, FUTURE_USE, FUTURE_USE, source_location, destination_location, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, tunnel_id_imsi, imei, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, action_source, start_ts, duration, tunnel_inspection_rule

FUTURE_USE, receive_ts, serial_number, event_category, FUTURE_USE, FUTURE_USE, log_ts, source_address, destination_address, FUTURE_USE, FUTURE_USE, rule, FUTURE_USE, FUTURE_USE, FUTURE_USE, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, protocol, action, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, sequence_number, FUTURE_USE, sctp_association_id, payload_protocol_id, severity,chunk_type, FUTURE_USE, sctp_verification_tag_1, sctp_verification_tag_2, cause_code, diameter_application_id, diameter_command_code, diameter_avp_code, stream_id, reason, opcode, calling_party_ssn, calling_party_global_title, filter, chunk_count, sent_chunk, received_chunk, packet, sent_packet, received_packet

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, datasize, sent_datasize, received_datasize, packet, start_ts, duration, category, FUTURE_USE, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, sent_packet, received_packet, reason, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, action_source, source_vm_uuid, destination_vm_uuid, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, sctp_association_id, chunk_count, sent_chunk, received_chunk, rule_uuid, http_connection

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, url, threat_id, category, severity, direction, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, content_type, pcap_id, checksum, wildfire_cloud, url_index, user_agent, file_type, x_forwarded_for, referer, sender, subject, receiver, report_id, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, FUTURE_USE, source_vm_uuid, destination_vm_uuid, request_method, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, threat_category, version, FUTURE_USE, sctp_association_id, payload_protocol_id, header

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, user, virtual_system, machine, os, source_address, match, repeat_count, match_type, FUTURE_USE, FUTURE_USE, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system, host, virtual_system_id, ipv6_source_address, host_id

FUTURE_USER, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user, user_id, event_id, repeat_count, timeout, source_port, destination_port, source, source_type, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, vendor, authentication_ts, factor_number, FUTURE_USE, FUTURE_USE, user_group_flag, source_user

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, severity, sequence_number, action_flag, source_location, destination_location, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, datasize, sent_datasize, received_datasize, packet, sent_packet, maximum_encapsulation_count, unknown_protocol_count, strict_check_count, tunnel_fragment_count, create_session_count, closed_session_count, reason, action_source, start_ts, duration, tunnel_inspection_rule, rule_uuid

FUTURE_USE, receive_ts, serial_number, event_category, FUTURE_USE, FUTURE_USE, log_ts, source_address, destination_address, FUTURE_USE, FUTURE_USE, rule, FUTURE_USE, FUTURE_USE, FUTURE_USE, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, protocol, action, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, sequence_number, FUTURE_USE, sctp_association_id, payload_protocol_id, severity,chunk_type, FUTURE_USE, sctp_verification_tag_1, sctp_verification_tag_2, cause_code, diameter_application_id, diameter_command_code, diameter_avp_code, stream_id, reason, opcode, calling_party_ssn, calling_party_global_title, filter, chunk_count, sent_chunk, received_chunk, packet, sent_packet, received_packet, rule_uuid

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_host, virtual_system, command, admin, client, result, path, before_change_detail, after_change_detail, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user, normalized_user, object, authentication_policy, repeat_count, authentication_id, vendor, log_profile, server_profile, description, client_type, event_type, factor_number, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, authentication_protocol, rule_uuid

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, datasize, sent_datasize, received_datasize, packet,start_ts, duration, category, FUTURE_USE, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, sent_packet, received_packet, reason, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, action_source, source_vm_uuid, destination_vm_uuid, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, sctp_association_id, chunk_count, sent_chunk, received_chunk, rule_uuid, http_connection, link_count, policy_id, switch, cluster, device_type, site, group, FUTURE_USE

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, url, threat_id, category, severity, direction, sequence_number, action_flag, source_location, destination_location, FUTURE_USE, content_type, pcap_id, hash, wildfire_cloud, url_index, user_agent, file_type, x_forwarded_for, referer, sender, subject, receiver, report_id, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, FUTURE_USE, source_vm_uuid, destination_vm_uuid, request_method, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, threat_category, version, FUTURE_USE, sctp_association_id, payload_protocol_id, header, url_category, rule_uuid, http_connection, group

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, destination_address, nat_source_address, nat_destination_address, rule, user, target_user, application, virtual_system, source_zone, destination_zone, source_interface,destination_interface,log_profile, FUTURE_USE, session_id, repeat_count, source_port, destination_port, nat_source_port, nat_destination_port, flag, protocol, action, severity, sequence_number, action_flag, source_location, destination_location, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, tunnel_id_imsi, imei, parent_session_id, parent_start_ts, tunnel_type, datasize, sent_datasize, received_datasize, packet, sent_packet, received_packet, maximum_encapsulation_count, unknown_protocol_count, strict_check_count, tunnel_fragment_count, create_session_count, closed_session_count, reason, action_source, start_ts, duration, tunnel_inspection_rule, remote_user_address, remote_user_id, rule_uuid, pcap_id, group

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_host, virtual_system, command, admin, client, result, path, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, event_id, object, FUTURE_USE, FUTURE_USE, module, severity, description, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, user, virtual_system, machine, os, source_address, match, repeat_count, match_type, FUTURE_USE, FUTURE_USE, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system, host, virtual_system_id, ipv6_source_address, host_id, device_serial_number

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, source_address, user, virtual_system, category, severity, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, object, object_id, description

FUTURE_USER, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user, user_id, event_id, repeat_count, timeout, source_port, destination_port, source, source_type, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, vendor,authentication_ts, factor_number, FUTURE_USE, FUTURE_USE, user_group_flag, source_user

FUTURE_USE, receive_ts, serial_number, event_category, sub_category, FUTURE_USE, log_ts, virtual_system, source_address, user,normalized_user, object, authentication_policy, repeat_count, authentication_id, vendor, log_profile, server_profile, description, client_type, event_type, factor_number, sequence_number, action_flag, device_group_hierarchy_1, device_group_hierarchy_2, device_group_hierarchy_3, device_group_hierarchy_4, virtual_system_name, host, virtual_system_id, authentication_protocol, rule_uuid

FUTURE_USE, receive_ts, serial_number, FUTURE_USE, FUTURE_USE, FUTURE_USE, log_ts, source_address, destination_address, FUTURE_USE, FUTURE_USE, rule, FUTURE_USE, FUTURE_USE, application, virtual_system, source_zone, destination_zone, source_interface, destination_interface, log_profile, FUTURE_USE, session_id, FUTURE_USE, source_port, destination_port, FUTURE_USE, FUTURE_USE, FUTURE_USE, protocol, action, event_type, isdn, access_point, radio_access_technology, message_type, subscriber_address, tunnel_endpoint_identifier_1, tunnel_endpoint_identifier_2, gtp_interface, status_code, severity, country_code, network_code, area_code, cell_id, event_code, FUTURE_USE, FUTURE_USE, source_location, destination_location, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, tunnel_id_imsi, imei, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, FUTURE_USE, start_ts, duration, tunnel_inspection_rule, remote_user_address, remote_user_id, rule_uuid, pcap_id