>
    Strata Copilot
    UserID HTTPS Fields
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Logging Service
    3. Strata Logging Service Log Reference
    4. Network Logs
    5. UserID
    6. UserID HTTPS Fields
    Download PDF
    Strata Logging Service

    UserID HTTPS Fields

    Table of Contents

    UserID HTTPS Fields

    The following table identifies the UserID field names that the Log Forwarding app uses when you forward logs using the HTTPS log format.
    HTTPS Name
    Query Name
    Field Type
    AuthCompletionTime
    auth_completion_time
    timestamp
    AuthFactorNo
    auth_factor_num
    int
    AuthenticatedUserDomain
    authenticated_user_info.​domain
    string
    AuthenticatedUserName
    authenticated_user_info.​name
    string
    AuthenticatedUserUUID
    authenticated_user_info.​uuid
    long
    ConfigVersion
    config_version.​value
    string
    RepeatCount
    count_of_repeats
    int
    CortexDataLakeTenantID
    customer_id
    string
    DestinationPort
    dest_port
    int
    DGHierarchyLevel1
    dg_hier_level_1
    int
    DGHierarchyLevel2
    dg_hier_level_2
    int
    DGHierarchyLevel3
    dg_hier_level_3
    int
    DGHierarchyLevel4
    dg_hier_level_4
    int
    EventID
    event_id
    string
    IsDuplicateLog
    is_dup_log
    boolean
    IsDuplicateUser
    is_duplicate_user
    boolean
    LogExported
    is_exported
    boolean
    LogForwarded
    is_forwarded
    boolean
    IsPrismaNetworks
    is_prisma_branch
    boolean
    IsPrismaUsers
    is_prisma_mobile
    boolean
    LogSource
    log_source
    string
    LogSourceGroupID
    log_source_group_id
    string
    DeviceSN
    log_source_id
    string
    DeviceName
    log_source_name
    string
    LogSourceTimeZoneOffset
    log_source_tz_offset
    int
    TimeReceived
    log_time
    timestamp
    LogType
    log_type.​value
    string
    MappingDataSource
    mapping_data_source.​value
    string
    MappingDataSourceName
    mapping_data_source_name
    string
    MappingDataSourceType
    mapping_data_source_type.​value
    string
    MappingTimeout
    mapping_timeout
    int
    MFAFactorType
    mfa_factor_type
    string
    PanoramaSN
    panorama_serial
    string
    PlatformType
    platform_type
    string
    SequenceNo
    sequence_no
    long
    SourceIP
    source_ip.​value
    ip
    SourcePort
    source_port
    int
    Subtype
    sub_type.​value
    string
    Tag
    tag_name
    string
    TimeGenerated
    time_generated
    timestamp
    TimeGeneratedHighResolution
    time_generated_high_res
    timestamp_high_res
    UGFlags
    ug_flags
    long
    User
    user
    string
    UserGroupFound
    user_group_found
    boolean
    UserIdentifiedBySource
    user_identified_by_source_as
    string
    VendorName
    vendor_name
    string
    VirtualLocation
    vsys
    string
    VirtualSystemID
    vsys_id
    int
    VirtualSystemName
    vsys_name
    string

    © 2026 Palo Alto Networks, Inc. All rights reserved.