Juniper JUNOS fields
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless
Generally available
Stack
Generally available
juniper fields.
The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is in beta and is not ready for production usage. For beta features, the design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features. Specific Support terms apply. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Stack
Beta
Beta
Module for parsing junipersrx syslog.
juniper.srx.reason-
reason
type: keyword
juniper.srx.connection_tag-
connection tag
type: keyword
juniper.srx.service_name-
service name
type: keyword
juniper.srx.nat_connection_tag-
nat connection tag
type: keyword
juniper.srx.src_nat_rule_type-
src nat rule type
type: keyword
juniper.srx.src_nat_rule_name-
src nat rule name
type: keyword
juniper.srx.dst_nat_rule_type-
dst nat rule type
type: keyword
juniper.srx.dst_nat_rule_name-
dst nat rule name
type: keyword
juniper.srx.protocol_id-
protocol id
type: keyword
juniper.srx.policy_name-
policy name
type: keyword
juniper.srx.session_id_32-
session id 32
type: keyword
juniper.srx.session_id-
session id
type: keyword
juniper.srx.outbound_packets-
packets from client
type: integer
juniper.srx.outbound_bytes-
bytes from client
type: integer
juniper.srx.inbound_packets-
packets from server
type: integer
juniper.srx.inbound_bytes-
bytes from server
type: integer
juniper.srx.elapsed_time-
elapsed time
type: date
juniper.srx.application-
application
type: keyword
juniper.srx.nested_application-
nested application
type: keyword
juniper.srx.username-
username
type: keyword
juniper.srx.roles-
roles
type: keyword
juniper.srx.encrypted-
encrypted
type: keyword
juniper.srx.application_category-
application category
type: keyword
juniper.srx.application_sub_category-
application sub category
type: keyword
juniper.srx.application_characteristics-
application characteristics
type: keyword
juniper.srx.secure_web_proxy_session_type-
secure web proxy session type
type: keyword
juniper.srx.peer_session_id-
peer session id
type: keyword
juniper.srx.peer_source_address-
peer source address
type: ip
juniper.srx.peer_source_port-
peer source port
type: integer
juniper.srx.peer_destination_address-
peer destination address
type: ip
juniper.srx.peer_destination_port-
peer destination port
type: integer
juniper.srx.hostname-
hostname
type: keyword
juniper.srx.src_vrf_grp-
src_vrf_grp
type: keyword
juniper.srx.dst_vrf_grp-
dst_vrf_grp
type: keyword
juniper.srx.icmp_type-
icmp type
type: integer
juniper.srx.process-
process that generated the message
type: keyword
juniper.srx.apbr_rule_type-
apbr rule type
type: keyword
juniper.srx.dscp_value-
apbr rule type
type: integer
juniper.srx.logical_system_name-
logical system name
type: keyword
juniper.srx.profile_name-
profile name
type: keyword
juniper.srx.routing_instance-
routing instance
type: keyword
juniper.srx.rule_name-
rule name
type: keyword
juniper.srx.uplink_tx_bytes-
uplink tx bytes
type: integer
juniper.srx.uplink_rx_bytes-
uplink rx bytes
type: integer
juniper.srx.obj-
url path
type: keyword
juniper.srx.url-
url domain
type: keyword
juniper.srx.profile-
filter profile
type: keyword
juniper.srx.category-
filter category
type: keyword
juniper.srx.filename-
filename
type: keyword
juniper.srx.temporary_filename-
temporary_filename
type: keyword
juniper.srx.name-
name
type: keyword
juniper.srx.error_message-
error_message
type: keyword
juniper.srx.error_code-
error_code
type: keyword
juniper.srx.action-
action
type: keyword
juniper.srx.protocol-
protocol
type: keyword
juniper.srx.protocol_name-
protocol name
type: keyword
juniper.srx.type-
type
type: keyword
juniper.srx.repeat_count-
repeat count
type: integer
juniper.srx.alert-
repeat alert
type: keyword
juniper.srx.message_type-
message type
type: keyword
juniper.srx.threat_severity-
threat severity
type: keyword
juniper.srx.application_name-
application name
type: keyword
juniper.srx.attack_name-
attack name
type: keyword
juniper.srx.index-
index
type: keyword
juniper.srx.message-
mesagge
type: keyword
juniper.srx.epoch_time-
epoch time
type: date
juniper.srx.packet_log_id-
packet log id
type: integer
juniper.srx.export_id-
packet log id
type: integer
juniper.srx.ddos_application_name-
ddos application name
type: keyword
juniper.srx.connection_hit_rate-
connection hit rate
type: integer
juniper.srx.time_scope-
time scope
type: keyword
juniper.srx.context_hit_rate-
context hit rate
type: integer
juniper.srx.context_value_hit_rate-
context value hit rate
type: integer
juniper.srx.time_count-
time count
type: integer
juniper.srx.time_period-
time period
type: integer
juniper.srx.context_value-
context value
type: keyword
juniper.srx.context_name-
context name
type: keyword
juniper.srx.ruleebase_name-
ruleebase name
type: keyword
juniper.srx.verdict_source-
verdict source
type: keyword
juniper.srx.verdict_number-
verdict number
type: integer
juniper.srx.file_category-
file category
type: keyword
juniper.srx.sample_sha256-
sample sha256
type: keyword
juniper.srx.malware_info-
malware info
type: keyword
juniper.srx.client_ip-
client ip
type: ip
juniper.srx.tenant_id-
tenant id
type: keyword
juniper.srx.timestamp-
timestamp
type: date
juniper.srx.th-
th
type: keyword
juniper.srx.status-
status
type: keyword
juniper.srx.state-
state
type: keyword
juniper.srx.file_hash_lookup-
file hash lookup
type: keyword
juniper.srx.file_name-
file name
type: keyword
juniper.srx.action_detail-
action detail
type: keyword
juniper.srx.sub_category-
sub category
type: keyword
juniper.srx.feed_name-
feed name
type: keyword
juniper.srx.occur_count-
occur count
type: integer
juniper.srx.tag-
system log message tag, which uniquely identifies the message.
type: keyword