count

Session count

uint32

request_name

Name of request. Ex: request_name="INVITE" or "NOTIFY"

string

message_type

Message Type. Ex: message_type="request"

string

reason

Reason. Ex: reason="unrecognized-form"

string

logsrc

string

to

Destination address

string

from

Where call was originated from

string

call_id

Ex: call_id="1-22011@10.6.30.11"

string

dir

Destination Interface

string

duration

Duration of the session. Ex: 180 (in seconds)

uint32

status

Status. Ex: status="blocked" , status= "start"

string

action

Action. Eg. block , allow

string

kind

Kind of service. Typically it will have value "call"

string

voip_proto

SIP/SCCP/MGCP/h323

string

profile

Name or number of associated VOIP profile

string

policy_id

Name of the firewall policy governing the traffic which caused the log message.

uint32

dst_int

Destination Interface

string

src_int

Name of the source interface. Ex: src_int="port1"

string

proto

Protocol number. Ex: for SIP it will be proto=17

uint8

dst_port

Destination port

uint16

dstip

Destination IP

ip

src_port

Port number of the traffic's origin. Ex: srcport=40772

uint16

srcip

IP address of the traffic's origin. Ex: srcip=10.1.100.155

ip

event_id

Unique event ID

uint32

epoch

Epoch

uint32

session_id

Session ID. Ex: session_id=232

uint32

tz

Time zone

string

eventtime

Time when event occured

uint64

vd

Name of the virtual domain in which the log message was recorded.

string

devid

Serial number of the device for the traffic's origin.

string

level

Log Level

string

subtype

Subtype

string

type

Type of log. Ex: type="utm"

string

logid

Unique Log ID

string

time

Hour clock when the log message was recorded.

string