open vpn

Expression

product = "open vpn"

Fields

Field	Core	Detection	Informational
src_ip			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	app	Default			✓
	src_ip	Default		✓
	additional_info	Default			✓
	bytes	Default			✓
	local_user_name
	src_host	Default		✓
	user	Default		✓
vpn-login	src_port	Default			✓
	duration	Default			✓
	src_translated_ip	Default			✓
	group_info	Default			✓
	dest_ip	Default		✓
	login_method	Default			✓
	dest_host	Default		✓
	session_id	Default			✓
	dest_port	Default			✓
vpn-logout	src_port
	duration
	src_translated_ip
	process_id
	group_info
	additional_info
	login_method
	event_name
	dest_host	Legacy			✓
	session_id
	dest_port