Find details about HTTPS events in Flow Analytics, including TLS errors, connection endpoints, applications, certificate information, actions, and related policy rules.
This view provides detailed visibility, filtering and analytical options for events recorded from HTTPS Logs. HTTPS logs may contribute to one of three event types: Firewall Events, Network Events and Web Attacks.
| Event Details |
Description |
|---|---|
| Date and Time |
ISO 8601 format: YYYY-MM-DD T HH:MM:SS:S Example: |
| Type |
TLS_ERROR, TLS_LOG. |
| CSP Account |
Multicloud Defense CSP Account. |
| Gateway |
Multicloud Defense Gateway. |
| Region |
Region of the Multicloud Defense Gateway. |
| Level |
DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, EMERGENCY. |
| Session ID |
.. |
| Service |
Description |
|---|---|
| Src IP |
Source IP Address. |
| Src Port |
Source Port. |
| Dest IP |
Destination IP Address. |
| Dest Port |
Destination Port. |
| Protocol |
UDP, TCP. |
| Application Info |
Description |
|---|---|
| Client App Name |
Application name associated with client side of the session. Example: |
| Payload App Name |
HTTP application name associated with webserver host. Example: |
| Service App Name |
Application name associated with server side of the session Example: |
| Action |
Description |
|---|---|
| Action |
ALLOW, DENY. |
| State |
ESTABLISHED, CLOSE, CLOSED, CLOSE_WAIT, TIME_WAIT, FIN_WAIT, LAST_ACK. |
| HTTP Request |
Description |
|---|---|
| Host |
Host portion of URL. |
| Method |
GET, PUT, POST, HEAD, DELETE, PATCH, OPTIONS. |
| URI |
URI Identifier RFC 3986. |
| FQDN |
Description |
|---|---|
| FQDN |
Fully Qualified Domain Name. |
| Category Name |
Category classification of the FQDN. Example: |
| Reputation |
Reputation score of the FQDN. |