network-session
April 24, 2024 · View on GitHub
Description
A representation of an entire network session
Parameters
| Parameter | Value |
|---|---|
| Subject | network |
| Activity | session |
| Activity Type | network-session |
| Pretty Name | Network Session |
Legacy Names
| Success | Fail |
|---|---|
| netflow-connection network-connection-successful process-network | netflow-connection network-connection-failed process-network-failed |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
network-session:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| dest_network_type | ✓ | ||
| dest_external_country | ✓ | ||
| cid | ✓ |
network-session:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| dest_network_type | ✓ | ||
| dest_external_country | ✓ | ||
| failure_reason | ✓ |