Substitute the following labels in the source category:
|
For the field that you want to add... |
You should choose... |
|---|---|
|
Source Address |
sourceAddressBin |
|
Source DNS Domain |
sourceDnsDomain |
|
Source Geo Country Code |
sourceGeoCountryCode |
|
Source Geo Latitude |
sourceGeoLatitude |
|
Source Geo Longitude |
sourceGeoLongitude |
|
Source Geo Postal Code |
sourceGeoPostalCode |
|
Source Geo Region Code |
sourceGeoRegionCode |
|
Source Geolocation Info |
sourceGeoLocationinfo |
|
Source Hostname |
sourceHostName |
|
Source Mac Address |
sourceMacAddressBin |
|
Source NT Domain |
sourceNtDomain |
|
Source Port |
sourcePort |
|
Source Process ID |
sourceProcessId |
|
Source Process Name |
sourceProcessName |
|
Source Service Name |
sourceServiceName |
|
Source Translated Address |
sourceTranslatedAddressBin |
|
Source Translated Port |
sourceTranslatedPort |
|
Source Translated Zone External ID |
sourceTranslatedZoneExternalID |
|
Source Translated Zone URI |
sourceTranslatedZoneURI |
|
Source User ID |
sourceUserId |
|
Source User Privileges |
sourceUser Privileges |
|
Source Username |
sourceUserName |
|
Source Zone External ID |
sourceZoneExternalID |
|
Source Zone URI |
sourceZoneURI |