Oct 12 21:42:57 gke-standard-cluster-2-pool-1-6ea9f13a-moqf 592 <142>1 2020-10-12T21:42:56.982Z stream-logfwd20-156653024-10121421-eq28-harness-16kn logforwarder - panwlogs - 1,2020-10-12T21:42:51.000000Z,007051000113358,HIPMATCH,hipmatch,10.0,2020-10-12T21:31:20.000000Z,paloaltonetwork\xxxxx,vsys1,machine_name2,Windows,::105:505:ffff:0,match_name1,16777216,HIP Object,,,343827467,-9223372036854775808,0,0,0,0,,PA-VM,1,7856:26e4:0:80fe:2983:1efe:ffb3:2b2,78:22:be:12:55:76,serial 0202020202,2,profile_list-2,5 Plus,Samsung,osfamily_list-2,osversion_list-2,6c258d1d8347b658,devhost_list-0,source-3,1996-06-22T05:27:59.000000Z,2020-10-12T21:31:21.110000Z
The fields are identified in the default order that they appear in each log
line.
HEADER,
log_time,
log_source_id,
log_type.value,
sub_type.value,
config_version.value,
time_generated,
source_user,
vsys,
endpoint_device_name,
endpoint_os_type,
source_ip.value,
hip_match_name,
count_of_repeats,
hip_match_type.value, EMPTY, EMPTY,
sequence_no,
action_flags,
dg_hier_level_1,
dg_hier_level_2,
dg_hier_level_3,
dg_hier_level_4,
vsys_name,
log_source_name,
vsys_id,
source_ip_v6.value,
host_id,
endpoint_serial_number,
source_device_category,
source_device_profile,
source_device_model,
source_device_vendor,
source_device_osfamily,
source_device_osversion,
source_device_mac,
source_device_host,
source,
timestamp_device_identification,
time_generated_high_res
