Application Fields

Application Fields
Field Name Example Values Field Type Notes
application_name Facebook, SQL, windows_rdp keyword (normalized:loweronly) Name of the application, this can be a layer 7 application name for network traffic, the name of an authenticating service/program for authentication, etc.
application_response_time   keyword Amount of time Applications Take to give response to a request
application_sso_signonmode   keyword For Single Sign-On (SSO) events this is the method used to access the application
application_sso_target_name   keyword For SSO events this is the name of the application being accessed