Audit EMAIL Fields

Table of Contents

The following table identifies the Audit field names that the Log Forwarding app uses when you forward logs using the EMAIL log format.

EMAIL Name	Query Name
EventCategory	event_category
EventDescription	event_description
EventDestinationURL	event_dest_url
EventDestinationUserUserID	event_dest_user.user_id
DestinationVendor	event_dest_vendor
EventDetails	event_detail
EventID	event_id
EventName	event_name
EventResult	event_result
EventSourceUserUserID	event_source_user.user_id
EventTime	event_time
LogSource	log_source
LogSourceGroupID	log_source_group_id
DeviceSN	log_source_id
DeviceName	log_source_name
TimeReceived	log_time
LogType	log_type.value
PlatformType	platform_type
Subtype	sub_type.value
TSGID	tsg_id
VendorName	vendor_name
VendorSeverity	vendor_severity.value