IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› ›

NetFlow fields

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

NetFlow fields

Fields from NetFlow and IPFIX flows.

netflow

Fields from NetFlow and IPFIX.

netflow.type

The type of NetFlow record described by this event.

type: keyword

exporter

Metadata related to the exporter device that generated this record.

netflow.exporter.address

Exporter’s network address in IP:port format.

type: keyword

netflow.exporter.source_id

Observation domain ID to which this record belongs.

type: long

netflow.exporter.timestamp

Time and date of export.

type: date

netflow.exporter.uptime_millis

How long the exporter process has been running, in milliseconds.

type: long

netflow.exporter.version

NetFlow version used.

type: integer

netflow.absolute_error

type: double

netflow.address_pool_high_threshold

type: long

netflow.address_pool_low_threshold

type: long

netflow.address_port_mapping_high_threshold

type: long

netflow.address_port_mapping_low_threshold

type: long

netflow.address_port_mapping_per_user_high_threshold

type: long

netflow.afc_protocol

type: integer

netflow.afc_protocol_name

type: keyword

netflow.anonymization_flags

type: integer

netflow.anonymization_technique

type: integer

netflow.application_business-relevance

type: long

netflow.application_category_name

type: keyword

netflow.application_description

type: keyword

netflow.application_group_name

type: keyword

netflow.application_http_uri_statistics

type: short

netflow.application_http_user-agent

type: short

netflow.application_id

type: short

netflow.application_name

type: keyword

netflow.application_sub_category_name

type: keyword

netflow.application_traffic-class

type: long

netflow.art_client_network_time_maximum

type: long

netflow.art_client_network_time_minimum

type: long

netflow.art_client_network_time_sum

type: long

netflow.art_clientpackets

type: long

netflow.art_count_late_responses

type: long

netflow.art_count_new_connections

type: long

netflow.art_count_responses

type: long

netflow.art_count_responses_histogram_bucket1

type: long

netflow.art_count_responses_histogram_bucket2

type: long

netflow.art_count_responses_histogram_bucket3

type: long

netflow.art_count_responses_histogram_bucket4

type: long

netflow.art_count_responses_histogram_bucket5

type: long

netflow.art_count_responses_histogram_bucket6

type: long

netflow.art_count_responses_histogram_bucket7

type: long

netflow.art_count_retransmissions

type: long

netflow.art_count_transactions

type: long

netflow.art_network_time_maximum

type: long

netflow.art_network_time_minimum

type: long

netflow.art_network_time_sum

type: long

netflow.art_response_time_maximum

type: long

netflow.art_response_time_minimum

type: long

netflow.art_response_time_sum

type: long

netflow.art_server_network_time_maximum

type: long

netflow.art_server_network_time_minimum

type: long

netflow.art_server_network_time_sum

type: long

netflow.art_server_response_time_maximum

type: long

netflow.art_server_response_time_minimum

type: long

netflow.art_server_response_time_sum

type: long

netflow.art_serverpackets

type: long

netflow.art_total_response_time_maximum

type: long

netflow.art_total_response_time_minimum

type: long

netflow.art_total_response_time_sum

type: long

netflow.art_total_transaction_time_maximum

type: long

netflow.art_total_transaction_time_minimum

type: long

netflow.art_total_transaction_time_sum

type: long

netflow.assembled_fragment_count

type: long

netflow.audit_counter

type: long

netflow.average_interarrival_time

type: long

netflow.bgp_destination_as_number

type: long

netflow.bgp_next_adjacent_as_number

type: long

netflow.bgp_next_hop_ipv4_address

type: ip

netflow.bgp_next_hop_ipv6_address

type: ip

netflow.bgp_prev_adjacent_as_number

type: long

netflow.bgp_source_as_number

type: long

netflow.bgp_validity_state

type: short

netflow.biflow_direction

type: short

netflow.bind_ipv4_address

type: ip

netflow.bind_transport_port

type: integer

netflow.class_id

type: long

netflow.class_name

type: keyword

netflow.classification_engine_id

type: short

netflow.collection_time_milliseconds

type: date

netflow.collector_certificate

type: short

netflow.collector_ipv4_address

type: ip

netflow.collector_ipv6_address

type: ip

netflow.collector_transport_port

type: integer

netflow.common_properties_id

type: long

netflow.confidence_level

type: double

netflow.conn_ipv4_address

type: ip

netflow.conn_transport_port

type: integer

netflow.connection_sum_duration_seconds

type: long

netflow.connection_transaction_id

type: long

netflow.conntrack_id

type: long

netflow.data_byte_count

type: long

netflow.data_link_frame_section

type: short

netflow.data_link_frame_size

type: integer

netflow.data_link_frame_type

type: integer

netflow.data_records_reliability

type: boolean

netflow.delta_flow_count

type: long

netflow.destination_ipv4_address

type: ip

netflow.destination_ipv4_prefix

type: ip

netflow.destination_ipv4_prefix_length

type: short

netflow.destination_ipv6_address

type: ip

netflow.destination_ipv6_prefix

type: ip

netflow.destination_ipv6_prefix_length

type: short

netflow.destination_mac_address

type: keyword

netflow.destination_transport_port

type: integer

netflow.digest_hash_value

type: long

netflow.distinct_count_of_destination_ip_address

type: long

netflow.distinct_count_of_destination_ipv4_address

type: long

netflow.distinct_count_of_destination_ipv6_address

type: long

netflow.distinct_count_of_source_ip_address

type: long

netflow.distinct_count_of_source_ipv4_address

type: long

netflow.distinct_count_of_source_ipv6_address

type: long

netflow.dns_authoritative

type: short

netflow.dns_cname

type: keyword

netflow.dns_id

type: integer

netflow.dns_mx_exchange

type: keyword

netflow.dns_mx_preference

type: integer

netflow.dns_nsd_name

type: keyword

netflow.dns_nx_domain

type: short

netflow.dns_ptrd_name

type: keyword

netflow.dns_qname

type: keyword

netflow.dns_qr_type

type: integer

netflow.dns_query_response

type: short

netflow.dns_rr_section

type: short

netflow.dns_soa_expire

type: long

netflow.dns_soa_minimum

type: long

netflow.dns_soa_refresh

type: long

netflow.dns_soa_retry

type: long

netflow.dns_soa_serial

type: long

netflow.dns_soam_name

type: keyword

netflow.dns_soar_name

type: keyword

netflow.dns_srv_port

type: integer

netflow.dns_srv_priority

type: integer

netflow.dns_srv_target

type: integer

netflow.dns_srv_weight

type: integer

netflow.dns_ttl

type: long

netflow.dns_txt_data

type: keyword

netflow.dot1q_customer_dei

type: boolean

netflow.dot1q_customer_destination_mac_address

type: keyword

netflow.dot1q_customer_priority

type: short

netflow.dot1q_customer_source_mac_address

type: keyword

netflow.dot1q_customer_vlan_id

type: integer

netflow.dot1q_dei

type: boolean

netflow.dot1q_priority

type: short

netflow.dot1q_service_instance_id

type: long

netflow.dot1q_service_instance_priority

type: short

netflow.dot1q_service_instance_tag

type: short

netflow.dot1q_vlan_id

type: integer

netflow.dropped_layer2_octet_delta_count

type: long

netflow.dropped_layer2_octet_total_count

type: long

netflow.dropped_octet_delta_count

type: long

netflow.dropped_octet_total_count

type: long

netflow.dropped_packet_delta_count

type: long

netflow.dropped_packet_total_count

type: long

netflow.dst_traffic_index

type: long

netflow.egress_broadcast_packet_total_count

type: long

netflow.egress_interface

type: long

netflow.egress_interface_type

type: long

netflow.egress_physical_interface

type: long

netflow.egress_unicast_packet_total_count

type: long

netflow.egress_vrfid

type: long

netflow.encrypted_technology

type: keyword

netflow.engine_id

type: short

netflow.engine_type

type: short

netflow.ethernet_header_length

type: short

netflow.ethernet_payload_length

type: integer

netflow.ethernet_total_length

type: integer

netflow.ethernet_type

type: integer

netflow.expired_fragment_count

type: long

netflow.export_interface

type: long

netflow.export_protocol_version

type: short

netflow.export_sctp_stream_id

type: integer

netflow.export_transport_protocol

type: short

netflow.exported_flow_record_total_count

type: long

netflow.exported_message_total_count

type: long

netflow.exported_octet_total_count

type: long

netflow.exporter_certificate

type: short

netflow.exporter_ipv4_address

type: ip

netflow.exporter_ipv6_address

type: ip

netflow.exporter_transport_port

type: integer

netflow.exporting_process_id

type: long

netflow.external_address_realm

type: short

netflow.firewall_event

type: short

netflow.first_eight_non_empty_packet_directions

type: short

netflow.first_non_empty_packet_size

type: integer

netflow.first_packet_banner

type: keyword

netflow.flags_and_sampler_id

type: long

netflow.flow_active_timeout

type: integer

netflow.flow_attributes

type: integer

netflow.flow_direction

type: short

netflow.flow_duration_microseconds

type: long

netflow.flow_duration_milliseconds

type: long

netflow.flow_end_delta_microseconds

type: long

netflow.flow_end_microseconds

type: date

netflow.flow_end_milliseconds

type: date

netflow.flow_end_nanoseconds

type: date

netflow.flow_end_reason

type: short

netflow.flow_end_seconds

type: date

netflow.flow_end_sys_up_time

type: long

netflow.flow_id

type: long

netflow.flow_idle_timeout

type: integer

netflow.flow_key_indicator

type: long

netflow.flow_label_ipv6

type: long

netflow.flow_sampling_time_interval

type: long

netflow.flow_sampling_time_spacing

type: long

netflow.flow_selected_flow_delta_count

type: long

netflow.flow_selected_octet_delta_count

type: long

netflow.flow_selected_packet_delta_count

type: long

netflow.flow_selector_algorithm

type: integer

netflow.flow_start_delta_microseconds

type: long

netflow.flow_start_microseconds

type: date

netflow.flow_start_milliseconds

type: date

netflow.flow_start_nanoseconds

type: date

netflow.flow_start_seconds

type: date

netflow.flow_start_sys_up_time

type: long

netflow.flow_table_flush_event_count

type: long

netflow.flow_table_peak_count

type: long

netflow.forwarding_status

type: short

netflow.fragment_flags

type: short

netflow.fragment_identification

type: long

netflow.fragment_offset

type: integer

netflow.fw_blackout_secs

type: long

netflow.fw_configured_value

type: long

netflow.fw_cts_src_sgt

type: long

netflow.fw_event_level

type: long

netflow.fw_event_level_id

type: long

netflow.fw_ext_event

type: integer

netflow.fw_ext_event_alt

type: long

netflow.fw_ext_event_desc

type: keyword

netflow.fw_half_open_count

type: long

netflow.fw_half_open_high

type: long

netflow.fw_half_open_rate

type: long

netflow.fw_max_sessions

type: long

netflow.fw_rule

type: keyword

netflow.fw_summary_pkt_count

type: long

netflow.fw_zone_pair_id

type: long

netflow.fw_zone_pair_name

type: long

netflow.global_address_mapping_high_threshold

type: long

netflow.gre_key

type: long

netflow.hash_digest_output

type: boolean

netflow.hash_flow_domain

type: integer

netflow.hash_initialiser_value

type: long

netflow.hash_ip_payload_offset

type: long

netflow.hash_ip_payload_size

type: long

netflow.hash_output_range_max

type: long

netflow.hash_output_range_min

type: long

netflow.hash_selected_range_max

type: long

netflow.hash_selected_range_min

type: long

netflow.http_content_type

type: keyword

netflow.http_message_version

type: keyword

netflow.http_reason_phrase

type: keyword

netflow.http_request_host

type: keyword

netflow.http_request_method

type: keyword

netflow.http_request_target

type: keyword

netflow.http_status_code

type: integer

netflow.http_user_agent

type: keyword

netflow.icmp_code_ipv4

type: short

netflow.icmp_code_ipv6

type: short

netflow.icmp_type_code_ipv4

type: integer

netflow.icmp_type_code_ipv6

type: integer

netflow.icmp_type_ipv4

type: short

netflow.icmp_type_ipv6

type: short

netflow.igmp_type

type: short

netflow.ignored_data_record_total_count

type: long

netflow.ignored_layer2_frame_total_count

type: long

netflow.ignored_layer2_octet_total_count

type: long

netflow.ignored_octet_total_count

type: long

netflow.ignored_packet_total_count

type: long

netflow.information_element_data_type

type: short

netflow.information_element_description

type: keyword

netflow.information_element_id

type: integer

netflow.information_element_index

type: integer

netflow.information_element_name

type: keyword

netflow.information_element_range_begin

type: long

netflow.information_element_range_end

type: long

netflow.information_element_semantics

type: short

netflow.information_element_units

type: integer

netflow.ingress_broadcast_packet_total_count

type: long

netflow.ingress_interface

type: long

netflow.ingress_interface_type

type: long

netflow.ingress_multicast_packet_total_count

type: long

netflow.ingress_physical_interface

type: long

netflow.ingress_unicast_packet_total_count

type: long

netflow.ingress_vrfid

type: long

netflow.initial_tcp_flags

type: short

netflow.initiator_octets

type: long

netflow.initiator_packets

type: long

netflow.interface_description

type: keyword

netflow.interface_name

type: keyword

netflow.intermediate_process_id

type: long

netflow.internal_address_realm

type: short

netflow.ip_class_of_service

type: short

netflow.ip_diff_serv_code_point

type: short

netflow.ip_header_length

type: short

netflow.ip_header_packet_section

type: short

netflow.ip_next_hop_ipv4_address

type: ip

netflow.ip_next_hop_ipv6_address

type: ip

netflow.ip_payload_length

type: long

netflow.ip_payload_packet_section

type: short

netflow.ip_precedence

type: short

netflow.ip_sec_spi

type: long

netflow.ip_total_length

type: long

netflow.ip_ttl

type: short

netflow.ip_version

type: short

netflow.ipv4_ihl

type: short

netflow.ipv4_options

type: long

netflow.ipv4_router_sc

type: ip

netflow.ipv6_extension_headers

type: long

netflow.is_multicast

type: short

netflow.ixia_browser_id

type: short

netflow.ixia_browser_name

type: keyword

netflow.ixia_device_id

type: short

netflow.ixia_device_name

type: keyword

netflow.ixia_dns_answer

type: keyword

netflow.ixia_dns_classes

type: keyword

netflow.ixia_dns_query

type: keyword

netflow.ixia_dns_record_txt

type: keyword

netflow.ixia_dst_as_name

type: keyword

netflow.ixia_dst_city_name

type: keyword

netflow.ixia_dst_country_code

type: keyword

netflow.ixia_dst_country_name

type: keyword

netflow.ixia_dst_latitude

type: float

netflow.ixia_dst_longitude

type: float

netflow.ixia_dst_region_code

type: keyword

netflow.ixia_dst_region_node

type: keyword

netflow.ixia_encrypt_cipher

type: keyword

netflow.ixia_encrypt_key_length

type: integer

netflow.ixia_encrypt_type

type: keyword

netflow.ixia_http_host_name

type: keyword

netflow.ixia_http_uri

type: keyword

netflow.ixia_http_user_agent

type: keyword

netflow.ixia_imsi_subscriber

type: keyword

netflow.ixia_l7_app_id

type: long

netflow.ixia_l7_app_name

type: keyword

netflow.ixia_latency

type: long

netflow.ixia_rev_octet_delta_count

type: long

netflow.ixia_rev_packet_delta_count

type: long

netflow.ixia_src_as_name

type: keyword

netflow.ixia_src_city_name

type: keyword

netflow.ixia_src_country_code

type: keyword

netflow.ixia_src_country_name

type: keyword

netflow.ixia_src_latitude

type: float

netflow.ixia_src_longitude

type: float

netflow.ixia_src_region_code

type: keyword

netflow.ixia_src_region_name

type: keyword

netflow.ixia_threat_ipv4

type: ip

netflow.ixia_threat_ipv6

type: ip

netflow.ixia_threat_type

type: keyword

netflow.large_packet_count

type: long

netflow.layer2_frame_delta_count

type: long

netflow.layer2_frame_total_count

type: long

netflow.layer2_octet_delta_count

type: long

netflow.layer2_octet_delta_sum_of_squares

type: long

netflow.layer2_octet_total_count

type: long

netflow.layer2_octet_total_sum_of_squares

type: long

netflow.layer2_segment_id

type: long

netflow.layer2packet_section_data

type: short

netflow.layer2packet_section_offset

type: integer

netflow.layer2packet_section_size

type: integer

netflow.line_card_id

type: long

netflow.log_op

type: short

netflow.lower_ci_limit

type: double

netflow.mark

type: long

netflow.max_bib_entries

type: long

netflow.max_entries_per_user

type: long

netflow.max_export_seconds

type: date

netflow.max_flow_end_microseconds

type: date

netflow.max_flow_end_milliseconds

type: date

netflow.max_flow_end_nanoseconds

type: date

netflow.max_flow_end_seconds

type: date

netflow.max_fragments_pending_reassembly

type: long

netflow.max_packet_size

type: integer

netflow.max_session_entries

type: long

netflow.max_subscribers

type: long

netflow.maximum_ip_total_length

type: long

netflow.maximum_layer2_total_length

type: long

netflow.maximum_ttl

type: short

netflow.mean_flow_rate

type: long

netflow.mean_packet_rate

type: long

netflow.message_md5_checksum

type: short

netflow.message_scope

type: short

netflow.metering_process_id

type: long

netflow.metro_evc_id

type: keyword

netflow.metro_evc_type

type: short

netflow.mib_capture_time_semantics

type: short

netflow.mib_context_engine_id

type: short

netflow.mib_context_name

type: keyword

netflow.mib_index_indicator

type: long

netflow.mib_module_name

type: keyword

netflow.mib_object_description

type: keyword

netflow.mib_object_identifier

type: short

netflow.mib_object_name

type: keyword

netflow.mib_object_syntax

type: keyword

netflow.mib_object_value_bits

type: short

netflow.mib_object_value_counter

type: long

netflow.mib_object_value_gauge

type: long

netflow.mib_object_value_integer

type: integer

netflow.mib_object_value_ip_address

type: ip

netflow.mib_object_value_octet_string

type: short

netflow.mib_object_value_oid

type: short

netflow.mib_object_value_time_ticks

type: long

netflow.mib_object_value_unsigned

type: long

netflow.mib_sub_identifier

type: long

netflow.min_export_seconds

type: date

netflow.min_flow_start_microseconds

type: date

netflow.min_flow_start_milliseconds

type: date

netflow.min_flow_start_nanoseconds

type: date

netflow.min_flow_start_seconds

type: date

netflow.minimum_ip_total_length

type: long

netflow.minimum_layer2_total_length

type: long

netflow.minimum_ttl

type: short

netflow.mobile_imsi

type: keyword

netflow.mobile_msisdn

type: keyword

netflow.monitoring_interval_end_milli_seconds

type: date

netflow.monitoring_interval_start_milli_seconds

type: date

netflow.mpls_label_stack_depth

type: long

netflow.mpls_label_stack_length

type: long

netflow.mpls_label_stack_section

type: short

netflow.mpls_label_stack_section10

type: short

netflow.mpls_label_stack_section2

type: short

netflow.mpls_label_stack_section3

type: short

netflow.mpls_label_stack_section4

type: short

netflow.mpls_label_stack_section5

type: short

netflow.mpls_label_stack_section6

type: short

netflow.mpls_label_stack_section7

type: short

netflow.mpls_label_stack_section8

type: short

netflow.mpls_label_stack_section9

type: short

netflow.mpls_payload_length

type: long

netflow.mpls_payload_packet_section

type: short

netflow.mpls_top_label_exp

type: short

netflow.mpls_top_label_ipv4_address

type: ip

netflow.mpls_top_label_ipv6_address

type: ip

netflow.mpls_top_label_prefix_length

type: short

netflow.mpls_top_label_stack_section

type: short

netflow.mpls_top_label_ttl

type: short

netflow.mpls_top_label_type

type: short

netflow.mpls_vpn_route_distinguisher

type: short

netflow.mptcp_address_id

type: short

netflow.mptcp_flags

type: short

netflow.mptcp_initial_data_sequence_number

type: long

netflow.mptcp_maximum_segment_size

type: integer

netflow.mptcp_receiver_token

type: long

netflow.multicast_replication_factor

type: long

netflow.nat_event

type: short

netflow.nat_inside_svcid

type: integer

netflow.nat_instance_id

type: long

netflow.nat_originating_address_realm

type: short

netflow.nat_outside_svcid

type: integer

netflow.nat_pool_id

type: long

netflow.nat_pool_name

type: keyword

netflow.nat_quota_exceeded_event

type: long

netflow.nat_sub_string

type: keyword

netflow.nat_threshold_event

type: long

netflow.nat_type

type: short

netflow.netscale_ica_client_version

type: keyword

netflow.netscaler_aaa_username

type: keyword

netflow.netscaler_app_name

type: keyword

netflow.netscaler_app_name_app_id

type: long

netflow.netscaler_app_name_incarnation_number

type: long

netflow.netscaler_app_template_name

type: keyword

netflow.netscaler_app_unit_name_app_id

type: long

netflow.netscaler_application_startup_duration

type: long

netflow.netscaler_application_startup_time

type: long

netflow.netscaler_cache_redir_client_connection_core_id

type: long

netflow.netscaler_cache_redir_client_connection_transaction_id

type: long

netflow.netscaler_client_rtt

type: long

netflow.netscaler_connection_chain_hop_count

type: long

netflow.netscaler_connection_chain_id

type: short

netflow.netscaler_connection_id

type: long

netflow.netscaler_current_license_consumed

type: long

netflow.netscaler_db_clt_host_name

type: keyword

netflow.netscaler_db_database_name

type: keyword

netflow.netscaler_db_login_flags

type: long

netflow.netscaler_db_protocol_name

type: short

netflow.netscaler_db_req_string

type: keyword

netflow.netscaler_db_req_type

type: short

netflow.netscaler_db_resp_length

type: long

netflow.netscaler_db_resp_status

type: long

netflow.netscaler_db_resp_status_string

type: keyword

netflow.netscaler_db_user_name

type: keyword

netflow.netscaler_flow_flags

type: long

netflow.netscaler_http_client_interaction_end_time

type: keyword

netflow.netscaler_http_client_interaction_start_time

type: keyword

netflow.netscaler_http_client_render_end_time

type: keyword

netflow.netscaler_http_client_render_start_time

type: keyword

netflow.netscaler_http_content_type

type: keyword

netflow.netscaler_http_domain_name

type: keyword

netflow.netscaler_http_req_authorization

type: keyword

netflow.netscaler_http_req_cookie

type: keyword

netflow.netscaler_http_req_forw_fb

type: long

netflow.netscaler_http_req_forw_lb

type: long

netflow.netscaler_http_req_host

type: keyword

netflow.netscaler_http_req_method

type: keyword

netflow.netscaler_http_req_rcv_fb

type: long

netflow.netscaler_http_req_rcv_lb

type: long

netflow.netscaler_http_req_referer

type: keyword

netflow.netscaler_http_req_url

type: keyword

netflow.netscaler_http_req_user_agent

type: keyword

netflow.netscaler_http_req_via

type: keyword

netflow.netscaler_http_req_xforwarded_for

type: keyword

netflow.netscaler_http_res_forw_fb

type: long

netflow.netscaler_http_res_forw_lb

type: long

netflow.netscaler_http_res_location

type: keyword

netflow.netscaler_http_res_rcv_fb

type: long

netflow.netscaler_http_res_rcv_lb

type: long

netflow.netscaler_http_res_set_cookie

type: keyword

netflow.netscaler_http_res_set_cookie2

type: keyword

netflow.netscaler_http_rsp_len

type: long

netflow.netscaler_http_rsp_status

type: integer

netflow.netscaler_ica_app_module_path

type: keyword

netflow.netscaler_ica_app_process_id

type: long

netflow.netscaler_ica_application_name

type: keyword

netflow.netscaler_ica_application_termination_time

type: long

netflow.netscaler_ica_application_termination_type

type: integer

netflow.netscaler_ica_channel_id1

type: long

netflow.netscaler_ica_channel_id1_bytes

type: long

netflow.netscaler_ica_channel_id2

type: long

netflow.netscaler_ica_channel_id2_bytes

type: long

netflow.netscaler_ica_channel_id3

type: long

netflow.netscaler_ica_channel_id3_bytes

type: long

netflow.netscaler_ica_channel_id4

type: long

netflow.netscaler_ica_channel_id4_bytes

type: long

netflow.netscaler_ica_channel_id5

type: long

netflow.netscaler_ica_channel_id5_bytes

type: long

netflow.netscaler_ica_client_host_name

type: keyword

netflow.netscaler_ica_client_ip

type: ip

netflow.netscaler_ica_client_launcher

type: integer

netflow.netscaler_ica_client_side_rto_count

type: integer

netflow.netscaler_ica_client_side_window_size

type: integer

netflow.netscaler_ica_client_type

type: integer

netflow.netscaler_ica_clientside_delay

type: long

netflow.netscaler_ica_clientside_jitter

type: long

netflow.netscaler_ica_clientside_packets_retransmit

type: integer

netflow.netscaler_ica_clientside_rtt

type: long

netflow.netscaler_ica_clientside_rx_bytes

type: long

netflow.netscaler_ica_clientside_srtt

type: long

netflow.netscaler_ica_clientside_tx_bytes

type: long

netflow.netscaler_ica_connection_priority

type: integer

netflow.netscaler_ica_device_serial_no

type: long

netflow.netscaler_ica_domain_name

type: keyword

netflow.netscaler_ica_flags

type: long

netflow.netscaler_ica_host_delay

type: long

netflow.netscaler_ica_l7_client_latency

type: long

netflow.netscaler_ica_l7_server_latency

type: long

netflow.netscaler_ica_launch_mechanism

type: integer

netflow.netscaler_ica_network_update_end_time

type: long

netflow.netscaler_ica_network_update_start_time

type: long

netflow.netscaler_ica_rtt

type: long

netflow.netscaler_ica_server_name

type: keyword

netflow.netscaler_ica_server_side_rto_count

type: integer

netflow.netscaler_ica_server_side_window_size

type: integer

netflow.netscaler_ica_serverside_delay

type: long

netflow.netscaler_ica_serverside_jitter

type: long

netflow.netscaler_ica_serverside_packets_retransmit

type: integer

netflow.netscaler_ica_serverside_rtt

type: long

netflow.netscaler_ica_serverside_srtt

type: long

netflow.netscaler_ica_session_end_time

type: long

netflow.netscaler_ica_session_guid

type: short

netflow.netscaler_ica_session_reconnects

type: short

netflow.netscaler_ica_session_setup_time

type: long

netflow.netscaler_ica_session_update_begin_sec

type: long

netflow.netscaler_ica_session_update_end_sec

type: long

netflow.netscaler_ica_username

type: keyword

netflow.netscaler_license_type

type: short

netflow.netscaler_main_page_core_id

type: long

netflow.netscaler_main_page_id

type: long

netflow.netscaler_max_license_count

type: long

netflow.netscaler_msi_client_cookie

type: short

netflow.netscaler_round_trip_time

type: long

netflow.netscaler_server_ttfb

type: long

netflow.netscaler_server_ttlb

type: long

netflow.netscaler_syslog_message

type: keyword

netflow.netscaler_syslog_priority

type: short

netflow.netscaler_syslog_timestamp

type: long

netflow.netscaler_transaction_id

type: long

netflow.netscaler_unknown270

type: long

netflow.netscaler_unknown271

type: long

netflow.netscaler_unknown272

type: long

netflow.netscaler_unknown273

type: long

netflow.netscaler_unknown274

type: long

netflow.netscaler_unknown275

type: long

netflow.netscaler_unknown276

type: long

netflow.netscaler_unknown277

type: long

netflow.netscaler_unknown278

type: long

netflow.netscaler_unknown279

type: long

netflow.netscaler_unknown280

type: long

netflow.netscaler_unknown281

type: long

netflow.netscaler_unknown282

type: long

netflow.netscaler_unknown283

type: long

netflow.netscaler_unknown284

type: long

netflow.netscaler_unknown285

type: long

netflow.netscaler_unknown286

type: long

netflow.netscaler_unknown287

type: long

netflow.netscaler_unknown288

type: long

netflow.netscaler_unknown289

type: long

netflow.netscaler_unknown290

type: long

netflow.netscaler_unknown291

type: long

netflow.netscaler_unknown292

type: long

netflow.netscaler_unknown293

type: long

netflow.netscaler_unknown294

type: long

netflow.netscaler_unknown295

type: long

netflow.netscaler_unknown296

type: long

netflow.netscaler_unknown297

type: long

netflow.netscaler_unknown298

type: long

netflow.netscaler_unknown299

type: long

netflow.netscaler_unknown300

type: long

netflow.netscaler_unknown301

type: long

netflow.netscaler_unknown302

type: long

netflow.netscaler_unknown303

type: long

netflow.netscaler_unknown304

type: long

netflow.netscaler_unknown305

type: long

netflow.netscaler_unknown306

type: long

netflow.netscaler_unknown307

type: long

netflow.netscaler_unknown308

type: long

netflow.netscaler_unknown309

type: long

netflow.netscaler_unknown310

type: long

netflow.netscaler_unknown311

type: long

netflow.netscaler_unknown312

type: long

netflow.netscaler_unknown313

type: long

netflow.netscaler_unknown314

type: long

netflow.netscaler_unknown315

type: long

netflow.netscaler_unknown316

type: keyword

netflow.netscaler_unknown317

type: long

netflow.netscaler_unknown318

type: long

netflow.netscaler_unknown319

type: keyword

netflow.netscaler_unknown320

type: integer

netflow.netscaler_unknown321

type: long

netflow.netscaler_unknown322

type: long

netflow.netscaler_unknown323

type: integer

netflow.netscaler_unknown324

type: integer

netflow.netscaler_unknown325

type: integer

netflow.netscaler_unknown326

type: integer

netflow.netscaler_unknown327

type: long

netflow.netscaler_unknown328

type: integer

netflow.netscaler_unknown329

type: integer

netflow.netscaler_unknown330

type: integer

netflow.netscaler_unknown331

type: integer

netflow.netscaler_unknown332

type: long

netflow.netscaler_unknown333

type: keyword

netflow.netscaler_unknown334

type: keyword

netflow.netscaler_unknown335

type: long

netflow.netscaler_unknown336

type: long

netflow.netscaler_unknown337

type: long

netflow.netscaler_unknown338

type: long

netflow.netscaler_unknown339

type: long

netflow.netscaler_unknown340

type: long

netflow.netscaler_unknown341

type: long

netflow.netscaler_unknown342

type: long

netflow.netscaler_unknown343

type: long

netflow.netscaler_unknown344

type: long

netflow.netscaler_unknown345

type: long

netflow.netscaler_unknown346

type: long

netflow.netscaler_unknown347

type: long

netflow.netscaler_unknown348

type: integer

netflow.netscaler_unknown349

type: keyword

netflow.netscaler_unknown350

type: keyword

netflow.netscaler_unknown351

type: keyword

netflow.netscaler_unknown352

type: integer

netflow.netscaler_unknown353

type: long

netflow.netscaler_unknown354

type: long

netflow.netscaler_unknown355

type: long

netflow.netscaler_unknown356

type: long

netflow.netscaler_unknown357

type: long

netflow.netscaler_unknown363

type: short

netflow.netscaler_unknown383

type: short

netflow.netscaler_unknown391

type: long

netflow.netscaler_unknown398

type: long

netflow.netscaler_unknown404

type: long

netflow.netscaler_unknown405

type: long

netflow.netscaler_unknown427

type: long

netflow.netscaler_unknown429

type: short

netflow.netscaler_unknown432

type: short

netflow.netscaler_unknown433

type: short

netflow.netscaler_unknown453

type: long

netflow.netscaler_unknown465

type: long

netflow.new_connection_delta_count

type: long

netflow.next_header_ipv6

type: short

netflow.non_empty_packet_count

type: long

netflow.not_sent_flow_total_count

type: long

netflow.not_sent_layer2_octet_total_count

type: long

netflow.not_sent_octet_total_count

type: long

netflow.not_sent_packet_total_count

type: long

netflow.observation_domain_id

type: long

netflow.observation_domain_name

type: keyword

netflow.observation_point_id

type: long

netflow.observation_point_type

type: short

netflow.observation_time_microseconds

type: date

netflow.observation_time_milliseconds

type: date

netflow.observation_time_nanoseconds

type: date

netflow.observation_time_seconds

type: date

netflow.observed_flow_total_count

type: long

netflow.octet_delta_count

type: long

netflow.octet_delta_sum_of_squares

type: long

netflow.octet_total_count

type: long

netflow.octet_total_sum_of_squares

type: long

netflow.opaque_octets

type: short

netflow.original_exporter_ipv4_address

type: ip

netflow.original_exporter_ipv6_address

type: ip

netflow.original_flows_completed

type: long

netflow.original_flows_initiated

type: long

netflow.original_flows_present

type: long

netflow.original_observation_domain_id

type: long

netflow.os_finger_print

type: keyword

netflow.os_name

type: keyword

netflow.os_version

type: keyword

netflow.p2p_technology

type: keyword

netflow.packet_delta_count

type: long

netflow.packet_total_count

type: long

netflow.padding_octets

type: short

netflow.payload

type: keyword

netflow.payload_entropy

type: short

netflow.payload_length_ipv6

type: integer

netflow.policy_qos_classification_hierarchy

type: long

netflow.policy_qos_queue_index

type: long

netflow.policy_qos_queuedrops

type: long

netflow.policy_qos_queueindex

type: long

netflow.port_id

type: long

netflow.port_range_end

type: integer

netflow.port_range_num_ports

type: integer

netflow.port_range_start

type: integer

netflow.port_range_step_size

type: integer

netflow.post_destination_mac_address

type: keyword

netflow.post_dot1q_customer_vlan_id

type: integer

netflow.post_dot1q_vlan_id

type: integer

netflow.post_ip_class_of_service

type: short

netflow.post_ip_diff_serv_code_point

type: short

netflow.post_ip_precedence

type: short

netflow.post_layer2_octet_delta_count

type: long

netflow.post_layer2_octet_total_count

type: long

netflow.post_mcast_layer2_octet_delta_count

type: long

netflow.post_mcast_layer2_octet_total_count

type: long

netflow.post_mcast_octet_delta_count

type: long

netflow.post_mcast_octet_total_count

type: long

netflow.post_mcast_packet_delta_count

type: long

netflow.post_mcast_packet_total_count

type: long

netflow.post_mpls_top_label_exp

type: short

netflow.post_napt_destination_transport_port

type: integer

netflow.post_napt_source_transport_port

type: integer

netflow.post_nat_destination_ipv4_address

type: ip

netflow.post_nat_destination_ipv6_address

type: ip

netflow.post_nat_source_ipv4_address

type: ip

netflow.post_nat_source_ipv6_address

type: ip

netflow.post_octet_delta_count

type: long

netflow.post_octet_total_count

type: long

netflow.post_packet_delta_count

type: long

netflow.post_packet_total_count

type: long

netflow.post_source_mac_address

type: keyword

netflow.post_vlan_id

type: integer

netflow.private_enterprise_number

type: long

netflow.procera_apn

type: keyword

netflow.procera_base_service

type: keyword

netflow.procera_content_categories

type: keyword

netflow.procera_device_id

type: long

netflow.procera_external_rtt

type: integer

netflow.procera_flow_behavior

type: keyword

netflow.procera_ggsn

type: keyword

netflow.procera_http_content_type

type: keyword

netflow.procera_http_file_length

type: long

netflow.procera_http_language

type: keyword

netflow.procera_http_location

type: keyword

netflow.procera_http_referer

type: keyword

netflow.procera_http_request_method

type: keyword

netflow.procera_http_request_version

type: keyword

netflow.procera_http_response_status

type: integer

netflow.procera_http_url

type: keyword

netflow.procera_http_user_agent

type: keyword

netflow.procera_imsi

type: long

netflow.procera_incoming_octets

type: long

netflow.procera_incoming_packets

type: long

netflow.procera_incoming_shaping_drops

type: long

netflow.procera_incoming_shaping_latency

type: integer

netflow.procera_internal_rtt

type: integer

netflow.procera_local_ipv4_host

type: ip

netflow.procera_local_ipv6_host

type: ip

netflow.procera_msisdn

type: long

netflow.procera_outgoing_octets

type: long

netflow.procera_outgoing_packets

type: long

netflow.procera_outgoing_shaping_drops

type: long

netflow.procera_outgoing_shaping_latency

type: integer

netflow.procera_property

type: keyword

netflow.procera_qoe_incoming_external

type: float

netflow.procera_qoe_incoming_internal

type: float

netflow.procera_qoe_outgoing_external

type: float

netflow.procera_qoe_outgoing_internal

type: float

netflow.procera_rat

type: keyword

netflow.procera_remote_ipv4_host

type: ip

netflow.procera_remote_ipv6_host

type: ip

netflow.procera_rnc

type: integer

netflow.procera_server_hostname

type: keyword

netflow.procera_service

type: keyword

netflow.procera_sgsn

type: keyword

netflow.procera_subscriber_identifier

type: keyword

netflow.procera_template_name

type: keyword

netflow.procera_user_location_information

type: keyword

netflow.protocol_identifier

type: short

netflow.pseudo_wire_control_word

type: long

netflow.pseudo_wire_destination_ipv4_address

type: ip

netflow.pseudo_wire_id

type: long

netflow.pseudo_wire_type

type: integer

netflow.reason

type: long

netflow.reason_text

type: keyword

netflow.relative_error

type: double

netflow.responder_octets

type: long

netflow.responder_packets

type: long

netflow.reverse_absolute_error

type: double

netflow.reverse_anonymization_flags

type: integer

netflow.reverse_anonymization_technique

type: integer

netflow.reverse_application_category_name

type: keyword

netflow.reverse_application_description

type: keyword

netflow.reverse_application_group_name

type: keyword

netflow.reverse_application_id

type: keyword

netflow.reverse_application_name

type: keyword

netflow.reverse_application_sub_category_name

type: keyword

netflow.reverse_average_interarrival_time

type: long

netflow.reverse_bgp_destination_as_number

type: long

netflow.reverse_bgp_next_adjacent_as_number

type: long

netflow.reverse_bgp_next_hop_ipv4_address

type: ip

netflow.reverse_bgp_next_hop_ipv6_address

type: ip

netflow.reverse_bgp_prev_adjacent_as_number

type: long

netflow.reverse_bgp_source_as_number

type: long

netflow.reverse_bgp_validity_state

type: short

netflow.reverse_class_id

type: short

netflow.reverse_class_name

type: keyword

netflow.reverse_classification_engine_id

type: short

netflow.reverse_collection_time_milliseconds

type: long

netflow.reverse_collector_certificate

type: keyword

netflow.reverse_confidence_level

type: double

netflow.reverse_connection_sum_duration_seconds

type: long

netflow.reverse_connection_transaction_id

type: long

netflow.reverse_data_byte_count

type: long

netflow.reverse_data_link_frame_section

type: keyword

netflow.reverse_data_link_frame_size

type: integer

netflow.reverse_data_link_frame_type

type: integer

netflow.reverse_data_records_reliability

type: short

netflow.reverse_delta_flow_count

type: long

netflow.reverse_destination_ipv4_address

type: ip

netflow.reverse_destination_ipv4_prefix

type: ip

netflow.reverse_destination_ipv4_prefix_length

type: short

netflow.reverse_destination_ipv6_address

type: ip

netflow.reverse_destination_ipv6_prefix

type: ip

netflow.reverse_destination_ipv6_prefix_length

type: short

netflow.reverse_destination_mac_address

type: keyword

netflow.reverse_destination_transport_port

type: integer

netflow.reverse_digest_hash_value

type: long

netflow.reverse_distinct_count_of_destination_ip_address

type: long

netflow.reverse_distinct_count_of_destination_ipv4_address

type: long

netflow.reverse_distinct_count_of_destination_ipv6_address

type: long

netflow.reverse_distinct_count_of_source_ip_address

type: long

netflow.reverse_distinct_count_of_source_ipv4_address

type: long

netflow.reverse_distinct_count_of_source_ipv6_address

type: long

netflow.reverse_dot1q_customer_dei

type: short

netflow.reverse_dot1q_customer_destination_mac_address

type: keyword

netflow.reverse_dot1q_customer_priority

type: short

netflow.reverse_dot1q_customer_source_mac_address

type: keyword

netflow.reverse_dot1q_customer_vlan_id

type: integer

netflow.reverse_dot1q_dei

type: short

netflow.reverse_dot1q_priority

type: short

netflow.reverse_dot1q_service_instance_id

type: long

netflow.reverse_dot1q_service_instance_priority

type: short

netflow.reverse_dot1q_service_instance_tag

type: keyword

netflow.reverse_dot1q_vlan_id

type: integer

netflow.reverse_dropped_layer2_octet_delta_count

type: long

netflow.reverse_dropped_layer2_octet_total_count

type: long

netflow.reverse_dropped_octet_delta_count

type: long

netflow.reverse_dropped_octet_total_count

type: long

netflow.reverse_dropped_packet_delta_count

type: long

netflow.reverse_dropped_packet_total_count

type: long

netflow.reverse_dst_traffic_index

type: long

netflow.reverse_egress_broadcast_packet_total_count

type: long

netflow.reverse_egress_interface

type: long

netflow.reverse_egress_interface_type

type: long

netflow.reverse_egress_physical_interface

type: long

netflow.reverse_egress_unicast_packet_total_count

type: long

netflow.reverse_egress_vrfid

type: long

netflow.reverse_encrypted_technology

type: keyword

netflow.reverse_engine_id

type: short

netflow.reverse_engine_type

type: short

netflow.reverse_ethernet_header_length

type: short

netflow.reverse_ethernet_payload_length

type: integer

netflow.reverse_ethernet_total_length

type: integer

netflow.reverse_ethernet_type

type: integer

netflow.reverse_export_sctp_stream_id

type: integer

netflow.reverse_exporter_certificate

type: keyword

netflow.reverse_exporting_process_id

type: long

netflow.reverse_firewall_event

type: short

netflow.reverse_first_non_empty_packet_size

type: integer

netflow.reverse_first_packet_banner

type: keyword

netflow.reverse_flags_and_sampler_id

type: long

netflow.reverse_flow_active_timeout

type: integer

netflow.reverse_flow_attributes

type: integer

netflow.reverse_flow_delta_milliseconds

type: long

netflow.reverse_flow_direction

type: short

netflow.reverse_flow_duration_microseconds

type: long

netflow.reverse_flow_duration_milliseconds

type: long

netflow.reverse_flow_end_delta_microseconds

type: long

netflow.reverse_flow_end_microseconds

type: long

netflow.reverse_flow_end_milliseconds

type: long

netflow.reverse_flow_end_nanoseconds

type: long

netflow.reverse_flow_end_reason

type: short

netflow.reverse_flow_end_seconds

type: long

netflow.reverse_flow_end_sys_up_time

type: long

netflow.reverse_flow_idle_timeout

type: integer

netflow.reverse_flow_label_ipv6

type: long

netflow.reverse_flow_sampling_time_interval

type: long

netflow.reverse_flow_sampling_time_spacing

type: long

netflow.reverse_flow_selected_flow_delta_count

type: long

netflow.reverse_flow_selected_octet_delta_count

type: long

netflow.reverse_flow_selected_packet_delta_count

type: long

netflow.reverse_flow_selector_algorithm

type: integer

netflow.reverse_flow_start_delta_microseconds

type: long

netflow.reverse_flow_start_microseconds

type: long

netflow.reverse_flow_start_milliseconds

type: long

netflow.reverse_flow_start_nanoseconds

type: long

netflow.reverse_flow_start_seconds

type: long

netflow.reverse_flow_start_sys_up_time

type: long

netflow.reverse_forwarding_status

type: long

netflow.reverse_fragment_flags

type: short

netflow.reverse_fragment_identification

type: long

netflow.reverse_fragment_offset

type: integer

netflow.reverse_gre_key

type: long

netflow.reverse_hash_digest_output

type: short

netflow.reverse_hash_flow_domain

type: integer

netflow.reverse_hash_initialiser_value

type: long

netflow.reverse_hash_ip_payload_offset

type: long

netflow.reverse_hash_ip_payload_size

type: long

netflow.reverse_hash_output_range_max

type: long

netflow.reverse_hash_output_range_min

type: long

netflow.reverse_hash_selected_range_max

type: long

netflow.reverse_hash_selected_range_min

type: long

netflow.reverse_icmp_code_ipv4

type: short

netflow.reverse_icmp_code_ipv6

type: short

netflow.reverse_icmp_type_code_ipv4

type: integer

netflow.reverse_icmp_type_code_ipv6

type: integer

netflow.reverse_icmp_type_ipv4

type: short

netflow.reverse_icmp_type_ipv6

type: short

netflow.reverse_igmp_type

type: short

netflow.reverse_ignored_data_record_total_count

type: long

netflow.reverse_ignored_layer2_frame_total_count

type: long

netflow.reverse_ignored_layer2_octet_total_count

type: long

netflow.reverse_information_element_data_type

type: short

netflow.reverse_information_element_description

type: keyword

netflow.reverse_information_element_id

type: integer

netflow.reverse_information_element_index

type: integer

netflow.reverse_information_element_name

type: keyword

netflow.reverse_information_element_range_begin

type: long

netflow.reverse_information_element_range_end

type: long

netflow.reverse_information_element_semantics

type: short

netflow.reverse_information_element_units

type: integer

netflow.reverse_ingress_broadcast_packet_total_count

type: long

netflow.reverse_ingress_interface

type: long

netflow.reverse_ingress_interface_type

type: long

netflow.reverse_ingress_multicast_packet_total_count

type: long

netflow.reverse_ingress_physical_interface

type: long

netflow.reverse_ingress_unicast_packet_total_count

type: long

netflow.reverse_ingress_vrfid

type: long

netflow.reverse_initial_tcp_flags

type: short

netflow.reverse_initiator_octets

type: long

netflow.reverse_initiator_packets

type: long

netflow.reverse_interface_description

type: keyword

netflow.reverse_interface_name

type: keyword

netflow.reverse_intermediate_process_id

type: long

netflow.reverse_ip_class_of_service

type: short

netflow.reverse_ip_diff_serv_code_point

type: short

netflow.reverse_ip_header_length

type: short

netflow.reverse_ip_header_packet_section

type: keyword

netflow.reverse_ip_next_hop_ipv4_address

type: ip

netflow.reverse_ip_next_hop_ipv6_address

type: ip

netflow.reverse_ip_payload_length

type: long

netflow.reverse_ip_payload_packet_section

type: keyword

netflow.reverse_ip_precedence

type: short

netflow.reverse_ip_sec_spi

type: long

netflow.reverse_ip_total_length

type: long

netflow.reverse_ip_ttl

type: short

netflow.reverse_ip_version

type: short

netflow.reverse_ipv4_ihl

type: short

netflow.reverse_ipv4_options

type: long

netflow.reverse_ipv4_router_sc

type: ip

netflow.reverse_ipv6_extension_headers

type: long

netflow.reverse_is_multicast

type: short

netflow.reverse_large_packet_count

type: long

netflow.reverse_layer2_frame_delta_count

type: long

netflow.reverse_layer2_frame_total_count

type: long

netflow.reverse_layer2_octet_delta_count

type: long

netflow.reverse_layer2_octet_delta_sum_of_squares

type: long

netflow.reverse_layer2_octet_total_count

type: long

netflow.reverse_layer2_octet_total_sum_of_squares

type: long

netflow.reverse_layer2_segment_id

type: long

netflow.reverse_layer2packet_section_data

type: keyword

netflow.reverse_layer2packet_section_offset

type: integer

netflow.reverse_layer2packet_section_size

type: integer

netflow.reverse_line_card_id

type: long

netflow.reverse_lower_ci_limit

type: double

netflow.reverse_max_export_seconds

type: long

netflow.reverse_max_flow_end_microseconds

type: long

netflow.reverse_max_flow_end_milliseconds

type: long

netflow.reverse_max_flow_end_nanoseconds

type: long

netflow.reverse_max_flow_end_seconds

type: long

netflow.reverse_max_packet_size

type: integer

netflow.reverse_maximum_ip_total_length

type: long

netflow.reverse_maximum_layer2_total_length

type: long

netflow.reverse_maximum_ttl

type: short

netflow.reverse_message_md5_checksum

type: keyword

netflow.reverse_message_scope

type: short

netflow.reverse_metering_process_id

type: long

netflow.reverse_metro_evc_id

type: keyword

netflow.reverse_metro_evc_type

type: short

netflow.reverse_min_export_seconds

type: long

netflow.reverse_min_flow_start_microseconds

type: long

netflow.reverse_min_flow_start_milliseconds

type: long

netflow.reverse_min_flow_start_nanoseconds

type: long

netflow.reverse_min_flow_start_seconds

type: long

netflow.reverse_minimum_ip_total_length

type: long

netflow.reverse_minimum_layer2_total_length

type: long

netflow.reverse_minimum_ttl

type: short

netflow.reverse_monitoring_interval_end_milli_seconds

type: long

netflow.reverse_monitoring_interval_start_milli_seconds

type: long

netflow.reverse_mpls_label_stack_depth

type: long

netflow.reverse_mpls_label_stack_length

type: long

netflow.reverse_mpls_label_stack_section

type: keyword

netflow.reverse_mpls_label_stack_section10

type: keyword

netflow.reverse_mpls_label_stack_section2

type: keyword

netflow.reverse_mpls_label_stack_section3

type: keyword

netflow.reverse_mpls_label_stack_section4

type: keyword

netflow.reverse_mpls_label_stack_section5

type: keyword

netflow.reverse_mpls_label_stack_section6

type: keyword

netflow.reverse_mpls_label_stack_section7

type: keyword

netflow.reverse_mpls_label_stack_section8

type: keyword

netflow.reverse_mpls_label_stack_section9

type: keyword

netflow.reverse_mpls_payload_length

type: long

netflow.reverse_mpls_payload_packet_section

type: keyword

netflow.reverse_mpls_top_label_exp

type: short

netflow.reverse_mpls_top_label_ipv4_address

type: ip

netflow.reverse_mpls_top_label_ipv6_address

type: ip

netflow.reverse_mpls_top_label_prefix_length

type: short

netflow.reverse_mpls_top_label_stack_section

type: keyword

netflow.reverse_mpls_top_label_ttl

type: short

netflow.reverse_mpls_top_label_type

type: short

netflow.reverse_mpls_vpn_route_distinguisher

type: keyword

netflow.reverse_multicast_replication_factor

type: long

netflow.reverse_nat_event

type: short

netflow.reverse_nat_originating_address_realm

type: short

netflow.reverse_nat_pool_id

type: long

netflow.reverse_nat_pool_name

type: keyword

netflow.reverse_nat_type

type: short

netflow.reverse_new_connection_delta_count

type: long

netflow.reverse_next_header_ipv6

type: short

netflow.reverse_non_empty_packet_count

type: long

netflow.reverse_not_sent_layer2_octet_total_count

type: long

netflow.reverse_observation_domain_name

type: keyword

netflow.reverse_observation_point_id

type: long

netflow.reverse_observation_point_type

type: short

netflow.reverse_observation_time_microseconds

type: long

netflow.reverse_observation_time_milliseconds

type: long

netflow.reverse_observation_time_nanoseconds

type: long

netflow.reverse_observation_time_seconds

type: long

netflow.reverse_octet_delta_count

type: long

netflow.reverse_octet_delta_sum_of_squares

type: long

netflow.reverse_octet_total_count

type: long

netflow.reverse_octet_total_sum_of_squares

type: long

netflow.reverse_opaque_octets

type: keyword

netflow.reverse_original_exporter_ipv4_address

type: ip

netflow.reverse_original_exporter_ipv6_address

type: ip

netflow.reverse_original_flows_completed

type: long

netflow.reverse_original_flows_initiated

type: long

netflow.reverse_original_flows_present

type: long

netflow.reverse_original_observation_domain_id

type: long

netflow.reverse_os_finger_print

type: keyword

netflow.reverse_os_name

type: keyword

netflow.reverse_os_version

type: keyword

netflow.reverse_p2p_technology

type: keyword

netflow.reverse_packet_delta_count

type: long

netflow.reverse_packet_total_count

type: long

netflow.reverse_payload

type: keyword

netflow.reverse_payload_entropy

type: short

netflow.reverse_payload_length_ipv6

type: integer

netflow.reverse_port_id

type: long

netflow.reverse_port_range_end

type: integer

netflow.reverse_port_range_num_ports

type: integer

netflow.reverse_port_range_start

type: integer

netflow.reverse_port_range_step_size

type: integer

netflow.reverse_post_destination_mac_address

type: keyword

netflow.reverse_post_dot1q_customer_vlan_id

type: integer

netflow.reverse_post_dot1q_vlan_id

type: integer

netflow.reverse_post_ip_class_of_service

type: short

netflow.reverse_post_ip_diff_serv_code_point

type: short

netflow.reverse_post_ip_precedence

type: short

netflow.reverse_post_layer2_octet_delta_count

type: long

netflow.reverse_post_layer2_octet_total_count

type: long

netflow.reverse_post_mcast_layer2_octet_delta_count

type: long

netflow.reverse_post_mcast_layer2_octet_total_count

type: long

netflow.reverse_post_mcast_octet_delta_count

type: long

netflow.reverse_post_mcast_octet_total_count

type: long

netflow.reverse_post_mcast_packet_delta_count

type: long

netflow.reverse_post_mcast_packet_total_count

type: long

netflow.reverse_post_mpls_top_label_exp

type: short

netflow.reverse_post_napt_destination_transport_port

type: integer

netflow.reverse_post_napt_source_transport_port

type: integer

netflow.reverse_post_nat_destination_ipv4_address

type: ip

netflow.reverse_post_nat_destination_ipv6_address

type: ip

netflow.reverse_post_nat_source_ipv4_address

type: ip

netflow.reverse_post_nat_source_ipv6_address

type: ip

netflow.reverse_post_octet_delta_count

type: long

netflow.reverse_post_octet_total_count

type: long

netflow.reverse_post_packet_delta_count

type: long

netflow.reverse_post_packet_total_count

type: long

netflow.reverse_post_source_mac_address

type: keyword

netflow.reverse_post_vlan_id

type: integer

netflow.reverse_private_enterprise_number

type: long

netflow.reverse_protocol_identifier

type: short

netflow.reverse_pseudo_wire_control_word

type: long

netflow.reverse_pseudo_wire_destination_ipv4_address

type: ip

netflow.reverse_pseudo_wire_id

type: long

netflow.reverse_pseudo_wire_type

type: integer

netflow.reverse_relative_error

type: double

netflow.reverse_responder_octets

type: long

netflow.reverse_responder_packets

type: long

netflow.reverse_rfc3550_jitter_microseconds

type: long

netflow.reverse_rfc3550_jitter_milliseconds

type: long

netflow.reverse_rfc3550_jitter_nanoseconds

type: long

netflow.reverse_rtp_payload_type

type: short

netflow.reverse_rtp_sequence_number

type: integer

netflow.reverse_sampler_id

type: short

netflow.reverse_sampler_mode

type: short

netflow.reverse_sampler_name

type: keyword

netflow.reverse_sampler_random_interval

type: long

netflow.reverse_sampling_algorithm

type: short

netflow.reverse_sampling_flow_interval

type: long

netflow.reverse_sampling_flow_spacing

type: long

netflow.reverse_sampling_interval

type: long

netflow.reverse_sampling_packet_interval

type: long

netflow.reverse_sampling_packet_space

type: long

netflow.reverse_sampling_population

type: long

netflow.reverse_sampling_probability

type: double

netflow.reverse_sampling_size

type: long

netflow.reverse_sampling_time_interval

type: long

netflow.reverse_sampling_time_space

type: long

netflow.reverse_second_packet_banner

type: keyword

netflow.reverse_section_exported_octets

type: integer

netflow.reverse_section_offset

type: integer

netflow.reverse_selection_sequence_id

type: long

netflow.reverse_selector_algorithm

type: integer

netflow.reverse_selector_id

type: long

netflow.reverse_selector_id_total_flows_observed

type: long

netflow.reverse_selector_id_total_flows_selected

type: long

netflow.reverse_selector_id_total_pkts_observed

type: long

netflow.reverse_selector_id_total_pkts_selected

type: long

netflow.reverse_selector_name

type: keyword

netflow.reverse_session_scope

type: short

netflow.reverse_small_packet_count

type: long

netflow.reverse_source_ipv4_address

type: ip

netflow.reverse_source_ipv4_prefix

type: ip

netflow.reverse_source_ipv4_prefix_length

type: short

netflow.reverse_source_ipv6_address

type: ip

netflow.reverse_source_ipv6_prefix

type: ip

netflow.reverse_source_ipv6_prefix_length

type: short

netflow.reverse_source_mac_address

type: keyword

netflow.reverse_source_transport_port

type: integer

netflow.reverse_src_traffic_index

type: long

netflow.reverse_sta_ipv4_address

type: ip

netflow.reverse_sta_mac_address

type: keyword

netflow.reverse_standard_deviation_interarrival_time

type: long

netflow.reverse_standard_deviation_payload_length

type: integer

netflow.reverse_system_init_time_milliseconds

type: long

netflow.reverse_tcp_ack_total_count

type: long

netflow.reverse_tcp_acknowledgement_number

type: long

netflow.reverse_tcp_control_bits

type: integer

netflow.reverse_tcp_destination_port

type: integer

netflow.reverse_tcp_fin_total_count

type: long

netflow.reverse_tcp_header_length

type: short

netflow.reverse_tcp_options

type: long

netflow.reverse_tcp_psh_total_count

type: long

netflow.reverse_tcp_rst_total_count

type: long

netflow.reverse_tcp_sequence_number

type: long

netflow.reverse_tcp_source_port

type: integer

netflow.reverse_tcp_syn_total_count

type: long

netflow.reverse_tcp_urg_total_count

type: long

netflow.reverse_tcp_urgent_pointer

type: integer

netflow.reverse_tcp_window_scale

type: integer

netflow.reverse_tcp_window_size

type: integer

netflow.reverse_total_length_ipv4

type: integer

netflow.reverse_transport_octet_delta_count

type: long

netflow.reverse_transport_packet_delta_count

type: long

netflow.reverse_tunnel_technology

type: keyword

netflow.reverse_udp_destination_port

type: integer

netflow.reverse_udp_message_length

type: integer

netflow.reverse_udp_source_port

type: integer

netflow.reverse_union_tcp_flags

type: short

netflow.reverse_upper_ci_limit

type: double

netflow.reverse_user_name

type: keyword

netflow.reverse_value_distribution_method

type: short

netflow.reverse_virtual_station_interface_id

type: keyword

netflow.reverse_virtual_station_interface_name

type: keyword

netflow.reverse_virtual_station_name

type: keyword

netflow.reverse_virtual_station_uuid

type: keyword

netflow.reverse_vlan_id

type: integer

netflow.reverse_vr_fname

type: keyword

netflow.reverse_wlan_channel_id

type: short

netflow.reverse_wlan_ssid

type: keyword

netflow.reverse_wtp_mac_address

type: keyword

netflow.rfc3550_jitter_microseconds

type: long

netflow.rfc3550_jitter_milliseconds

type: long

netflow.rfc3550_jitter_nanoseconds

type: long

netflow.rtp_payload_type

type: short

netflow.rtp_sequence_number

type: integer

netflow.sampler_id

type: short

netflow.sampler_mode

type: short

netflow.sampler_name

type: keyword

netflow.sampler_random_interval

type: long

netflow.sampling_algorithm

type: short

netflow.sampling_flow_interval

type: long

netflow.sampling_flow_spacing

type: long

netflow.sampling_interval

type: long

netflow.sampling_packet_interval

type: long

netflow.sampling_packet_space

type: long

netflow.sampling_population

type: long

netflow.sampling_probability

type: double

netflow.sampling_size

type: long

netflow.sampling_time_interval

type: long

netflow.sampling_time_space

type: long

netflow.second_packet_banner

type: keyword

netflow.section_exported_octets

type: integer

netflow.section_offset

type: integer

netflow.selection_sequence_id

type: long

netflow.selector_algorithm

type: integer

netflow.selector_id

type: long

netflow.selector_id_total_flows_observed

type: long

netflow.selector_id_total_flows_selected

type: long

netflow.selector_id_total_pkts_observed

type: long

netflow.selector_id_total_pkts_selected

type: long

netflow.selector_name

type: keyword

netflow.service_name

type: keyword

netflow.session_scope

type: short

netflow.silk_app_label

type: integer

netflow.small_packet_count

type: long

netflow.source_ipv4_address

type: ip

netflow.source_ipv4_prefix

type: ip

netflow.source_ipv4_prefix_length

type: short

netflow.source_ipv6_address

type: ip

netflow.source_ipv6_prefix

type: ip

netflow.source_ipv6_prefix_length

type: short

netflow.source_mac_address

type: keyword

netflow.source_transport_port

type: integer

netflow.source_transport_ports_limit

type: integer

netflow.src_traffic_index

type: long

netflow.ssl_cert_serial_number

type: keyword

netflow.ssl_cert_signature

type: keyword

netflow.ssl_cert_validity_not_after

type: keyword

netflow.ssl_cert_validity_not_before

type: keyword

netflow.ssl_cert_version

type: short

netflow.ssl_certificate_hash

type: keyword

netflow.ssl_cipher

type: keyword

netflow.ssl_client_version

type: short

netflow.ssl_compression_method

type: short

netflow.ssl_object_type

type: keyword

netflow.ssl_object_value

type: keyword

netflow.ssl_public_key_algorithm

type: keyword

netflow.ssl_public_key_length

type: keyword

netflow.ssl_server_cipher

type: long

netflow.ssl_server_name

type: keyword

netflow.sta_ipv4_address

type: ip

netflow.sta_mac_address

type: keyword

netflow.standard_deviation_interarrival_time

type: long

netflow.standard_deviation_payload_length

type: short

netflow.system_init_time_milliseconds

type: date

netflow.tcp_ack_total_count

type: long

netflow.tcp_acknowledgement_number

type: long

netflow.tcp_control_bits

type: integer

netflow.tcp_destination_port

type: integer

netflow.tcp_fin_total_count

type: long

netflow.tcp_header_length

type: short

netflow.tcp_options

type: long

netflow.tcp_psh_total_count

type: long

netflow.tcp_rst_total_count

type: long

netflow.tcp_sequence_number

type: long

netflow.tcp_source_port

type: integer

netflow.tcp_syn_total_count

type: long

netflow.tcp_urg_total_count

type: long

netflow.tcp_urgent_pointer

type: integer

netflow.tcp_window_scale

type: integer

netflow.tcp_window_size

type: integer

netflow.template_id

type: integer

netflow.tftp_filename

type: keyword

netflow.tftp_mode

type: keyword

netflow.timestamp

type: long

netflow.timestamp_absolute_monitoring-interval

type: long

netflow.total_length_ipv4

type: integer

netflow.traffic_type

type: short

netflow.transport_octet_delta_count

type: long

netflow.transport_packet_delta_count

type: long

netflow.tunnel_technology

type: keyword

netflow.udp_destination_port

type: integer

netflow.udp_message_length

type: integer

netflow.udp_source_port

type: integer

netflow.union_tcp_flags

type: short

netflow.upper_ci_limit

type: double

netflow.user_name

type: keyword

netflow.username

type: keyword

netflow.value_distribution_method

type: short

netflow.viptela_vpn_id

type: long

netflow.virtual_station_interface_id

type: short

netflow.virtual_station_interface_name

type: keyword

netflow.virtual_station_name

type: keyword

netflow.virtual_station_uuid

type: short

netflow.vlan_id

type: integer

netflow.vmware_egress_interface_attr

type: integer

netflow.vmware_ingress_interface_attr

type: integer

netflow.vmware_tenant_dest_ipv4

type: ip

netflow.vmware_tenant_dest_ipv6

type: ip

netflow.vmware_tenant_dest_port

type: integer

netflow.vmware_tenant_protocol

type: short

netflow.vmware_tenant_source_ipv4

type: ip

netflow.vmware_tenant_source_ipv6

type: ip

netflow.vmware_tenant_source_port

type: integer

netflow.vmware_vxlan_export_role

type: short

netflow.vpn_identifier

type: short

netflow.vr_fname

type: keyword

netflow.waasoptimization_segment

type: short

netflow.wlan_channel_id

type: short

netflow.wlan_ssid

type: keyword

netflow.wtp_mac_address

type: keyword

netflow.xlate_destination_address_ip_v4

type: ip

netflow.xlate_destination_port

type: integer

netflow.xlate_source_address_ip_v4

type: ip

netflow.xlate_source_port

type: integer

« NATS fields Nginx fields »