NetFlow fields

Fields from NetFlow and IPFIX flows.

Fields from NetFlow and IPFIX.

netflow.type

The type of NetFlow record described by this event.

type: keyword

Metadata related to the exporter device that generated this record.

netflow.exporter.address

Exporter’s network address in IP:port format.

type: keyword

netflow.exporter.source_id

Observation domain ID to which this record belongs.

type: long

netflow.exporter.timestamp

Time and date of export.

type: date

netflow.exporter.uptime_millis

How long the exporter process has been running, in milliseconds.

type: long

netflow.exporter.version

NetFlow version used.

type: integer

netflow.absolute_error

type: double

netflow.address_pool_high_threshold

type: long

netflow.address_pool_low_threshold

type: long

netflow.address_port_mapping_high_threshold

type: long

netflow.address_port_mapping_low_threshold

type: long

netflow.address_port_mapping_per_user_high_threshold

type: long

netflow.afc_protocol

type: integer

netflow.afc_protocol_name

type: keyword

netflow.anonymization_flags

type: integer

netflow.anonymization_technique

type: integer

netflow.application_business-relevance

type: long

netflow.application_category_name

type: keyword

netflow.application_description

type: keyword

netflow.application_group_name

type: keyword

netflow.application_http_uri_statistics

type: short

netflow.application_http_user-agent

type: short

netflow.application_id

type: short

netflow.application_name

type: keyword

netflow.application_sub_category_name

type: keyword

netflow.application_traffic-class

type: long

netflow.art_client_network_time_maximum

type: long

netflow.art_client_network_time_minimum

type: long

netflow.art_client_network_time_sum

type: long

netflow.art_clientpackets

type: long

netflow.art_count_late_responses

type: long

netflow.art_count_new_connections

type: long

netflow.art_count_responses

type: long

netflow.art_count_responses_histogram_bucket1

type: long

netflow.art_count_responses_histogram_bucket2

type: long

netflow.art_count_responses_histogram_bucket3

type: long

netflow.art_count_responses_histogram_bucket4

type: long

netflow.art_count_responses_histogram_bucket5

type: long

netflow.art_count_responses_histogram_bucket6

type: long

netflow.art_count_responses_histogram_bucket7

type: long

netflow.art_count_retransmissions

type: long

netflow.art_count_transactions

type: long

netflow.art_network_time_maximum

type: long

netflow.art_network_time_minimum

type: long

netflow.art_network_time_sum

type: long

netflow.art_response_time_maximum

type: long

netflow.art_response_time_minimum

type: long

netflow.art_response_time_sum

type: long

netflow.art_server_network_time_maximum

type: long

netflow.art_server_network_time_minimum

type: long

netflow.art_server_network_time_sum

type: long

netflow.art_server_response_time_maximum

type: long

netflow.art_server_response_time_minimum

type: long

netflow.art_server_response_time_sum

type: long

netflow.art_serverpackets

type: long

netflow.art_total_response_time_maximum

type: long

netflow.art_total_response_time_minimum

type: long

netflow.art_total_response_time_sum

type: long

netflow.art_total_transaction_time_maximum

type: long

netflow.art_total_transaction_time_minimum

type: long

netflow.art_total_transaction_time_sum

type: long

netflow.assembled_fragment_count

type: long

netflow.audit_counter

type: long

netflow.average_interarrival_time

type: long

netflow.bgp_destination_as_number

type: long

netflow.bgp_next_adjacent_as_number

type: long

netflow.bgp_next_hop_ipv4_address

type: ip

netflow.bgp_next_hop_ipv6_address

type: ip

netflow.bgp_prev_adjacent_as_number

type: long

netflow.bgp_source_as_number

type: long

netflow.bgp_validity_state

type: short

netflow.biflow_direction

type: short

netflow.bind_ipv4_address

type: ip

netflow.bind_transport_port

type: integer

netflow.class_id

type: long

netflow.class_name

type: keyword

netflow.classification_engine_id

type: short

netflow.collection_time_milliseconds

type: date

netflow.collector_certificate

type: short

netflow.collector_ipv4_address

type: ip

netflow.collector_ipv6_address

type: ip

netflow.collector_transport_port

type: integer

netflow.common_properties_id

type: long

netflow.confidence_level

type: double

netflow.conn_ipv4_address

type: ip

netflow.conn_transport_port

type: integer

netflow.connection_sum_duration_seconds

type: long

netflow.connection_transaction_id

type: long

netflow.conntrack_id

type: long

netflow.data_byte_count

type: long

netflow.data_link_frame_section

type: short

netflow.data_link_frame_size

type: integer

netflow.data_link_frame_type

type: integer

netflow.data_records_reliability

type: boolean

netflow.delta_flow_count

type: long

netflow.destination_ipv4_address

type: ip

netflow.destination_ipv4_prefix

type: ip

netflow.destination_ipv4_prefix_length

type: short

netflow.destination_ipv6_address

type: ip

netflow.destination_ipv6_prefix

type: ip

netflow.destination_ipv6_prefix_length

type: short

netflow.destination_mac_address

type: keyword

netflow.destination_transport_port

type: integer

netflow.digest_hash_value

type: long

netflow.distinct_count_of_destination_ip_address

type: long

netflow.distinct_count_of_destination_ipv4_address

type: long

netflow.distinct_count_of_destination_ipv6_address

type: long

netflow.distinct_count_of_source_ip_address

type: long

netflow.distinct_count_of_source_ipv4_address

type: long

netflow.distinct_count_of_source_ipv6_address

type: long

netflow.dns_authoritative

type: short

netflow.dns_cname

type: keyword

netflow.dns_id

type: integer

netflow.dns_mx_exchange

type: keyword

netflow.dns_mx_preference

type: integer

netflow.dns_nsd_name

type: keyword

netflow.dns_nx_domain

type: short

netflow.dns_ptrd_name

type: keyword

netflow.dns_qname

type: keyword

netflow.dns_qr_type

type: integer

netflow.dns_query_response

type: short

netflow.dns_rr_section

type: short

netflow.dns_soa_expire

type: long

netflow.dns_soa_minimum

type: long

netflow.dns_soa_refresh

type: long

netflow.dns_soa_retry

type: long

netflow.dns_soa_serial

type: long

netflow.dns_soam_name

type: keyword

netflow.dns_soar_name

type: keyword

netflow.dns_srv_port

type: integer

netflow.dns_srv_priority

type: integer

netflow.dns_srv_target

type: integer

netflow.dns_srv_weight

type: integer

netflow.dns_ttl

type: long

netflow.dns_txt_data

type: keyword

netflow.dot1q_customer_dei

type: boolean

netflow.dot1q_customer_destination_mac_address

type: keyword

netflow.dot1q_customer_priority

type: short

netflow.dot1q_customer_source_mac_address

type: keyword

netflow.dot1q_customer_vlan_id

type: integer

netflow.dot1q_dei

type: boolean

netflow.dot1q_priority

type: short

netflow.dot1q_service_instance_id

type: long

netflow.dot1q_service_instance_priority

type: short

netflow.dot1q_service_instance_tag

type: short

netflow.dot1q_vlan_id

type: integer

netflow.dropped_layer2_octet_delta_count

type: long

netflow.dropped_layer2_octet_total_count

type: long

netflow.dropped_octet_delta_count

type: long

netflow.dropped_octet_total_count

type: long

netflow.dropped_packet_delta_count

type: long

netflow.dropped_packet_total_count

type: long

netflow.dst_traffic_index

type: long

netflow.egress_broadcast_packet_total_count

type: long

netflow.egress_interface

type: long

netflow.egress_interface_type

type: long

netflow.egress_physical_interface

type: long

netflow.egress_unicast_packet_total_count

type: long

netflow.egress_vrfid

type: long

netflow.encrypted_technology

type: keyword

netflow.engine_id

type: short

netflow.engine_type

type: short

netflow.ethernet_header_length

type: short

netflow.ethernet_payload_length

type: integer

netflow.ethernet_total_length

type: integer

netflow.ethernet_type

type: integer

netflow.expired_fragment_count

type: long

netflow.export_interface

type: long

netflow.export_protocol_version

type: short

netflow.export_sctp_stream_id

type: integer

netflow.export_transport_protocol

type: short

netflow.exported_flow_record_total_count

type: long

netflow.exported_message_total_count

type: long

netflow.exported_octet_total_count

type: long

netflow.exporter_certificate

type: short

netflow.exporter_ipv4_address

type: ip

netflow.exporter_ipv6_address

type: ip

netflow.exporter_transport_port

type: integer

netflow.exporting_process_id

type: long

netflow.external_address_realm

type: short

netflow.firewall_event

type: short

netflow.first_eight_non_empty_packet_directions

type: short

netflow.first_non_empty_packet_size

type: integer

netflow.first_packet_banner

type: keyword

netflow.flags_and_sampler_id

type: long

netflow.flow_active_timeout

type: integer

netflow.flow_attributes

type: integer

netflow.flow_direction

type: short

netflow.flow_duration_microseconds

type: long

netflow.flow_duration_milliseconds

type: long

netflow.flow_end_delta_microseconds

type: long

netflow.flow_end_microseconds

type: date

netflow.flow_end_milliseconds

type: date

netflow.flow_end_nanoseconds

type: date

netflow.flow_end_reason

type: short

netflow.flow_end_seconds

type: date

netflow.flow_end_sys_up_time

type: long

netflow.flow_id

type: long

netflow.flow_idle_timeout

type: integer

netflow.flow_key_indicator

type: long

netflow.flow_label_ipv6

type: long

netflow.flow_sampling_time_interval

type: long

netflow.flow_sampling_time_spacing

type: long

netflow.flow_selected_flow_delta_count

type: long

netflow.flow_selected_octet_delta_count

type: long

netflow.flow_selected_packet_delta_count

type: long

netflow.flow_selector_algorithm

type: integer

netflow.flow_start_delta_microseconds

type: long

netflow.flow_start_microseconds

type: date

netflow.flow_start_milliseconds

type: date

netflow.flow_start_nanoseconds

type: date

netflow.flow_start_seconds

type: date

netflow.flow_start_sys_up_time

type: long

netflow.flow_table_flush_event_count

type: long

netflow.flow_table_peak_count

type: long

netflow.forwarding_status

type: short

netflow.fragment_flags

type: short

netflow.fragment_identification

type: long

netflow.fragment_offset

type: integer

netflow.fw_blackout_secs

type: long

netflow.fw_configured_value

type: long

netflow.fw_cts_src_sgt

type: long

netflow.fw_event_level

type: long

netflow.fw_event_level_id

type: long

netflow.fw_ext_event

type: integer

netflow.fw_ext_event_alt

type: long

netflow.fw_ext_event_desc

type: keyword

netflow.fw_half_open_count

type: long

netflow.fw_half_open_high

type: long

netflow.fw_half_open_rate

type: long

netflow.fw_max_sessions

type: long

netflow.fw_rule

type: keyword

netflow.fw_summary_pkt_count

type: long

netflow.fw_zone_pair_id

type: long

netflow.fw_zone_pair_name

type: long

netflow.global_address_mapping_high_threshold

type: long

netflow.gre_key

type: long

netflow.hash_digest_output

type: boolean

netflow.hash_flow_domain

type: integer

netflow.hash_initialiser_value

type: long

netflow.hash_ip_payload_offset

type: long

netflow.hash_ip_payload_size

type: long

netflow.hash_output_range_max

type: long

netflow.hash_output_range_min

type: long

netflow.hash_selected_range_max

type: long

netflow.hash_selected_range_min

type: long

netflow.http_content_type

type: keyword

netflow.http_message_version

type: keyword

netflow.http_reason_phrase

type: keyword

netflow.http_request_host

type: keyword

netflow.http_request_method

type: keyword

netflow.http_request_target

type: keyword

netflow.http_status_code

type: integer

netflow.http_user_agent

type: keyword

netflow.icmp_code_ipv4

type: short

netflow.icmp_code_ipv6

type: short

netflow.icmp_type_code_ipv4

type: integer

netflow.icmp_type_code_ipv6

type: integer

netflow.icmp_type_ipv4

type: short

netflow.icmp_type_ipv6

type: short

netflow.igmp_type

type: short

netflow.ignored_data_record_total_count

type: long

netflow.ignored_layer2_frame_total_count

type: long

netflow.ignored_layer2_octet_total_count

type: long

netflow.ignored_octet_total_count

type: long

netflow.ignored_packet_total_count

type: long

netflow.information_element_data_type

type: short

netflow.information_element_description

type: keyword

netflow.information_element_id

type: integer

netflow.information_element_index

type: integer

netflow.information_element_name

type: keyword

netflow.information_element_range_begin

type: long

netflow.information_element_range_end

type: long

netflow.information_element_semantics

type: short

netflow.information_element_units

type: integer

netflow.ingress_broadcast_packet_total_count

type: long

netflow.ingress_interface

type: long

netflow.ingress_interface_type

type: long

netflow.ingress_multicast_packet_total_count

type: long

netflow.ingress_physical_interface

type: long

netflow.ingress_unicast_packet_total_count

type: long

netflow.ingress_vrfid

type: long

netflow.initial_tcp_flags

type: short

netflow.initiator_octets

type: long

netflow.initiator_packets

type: long

netflow.interface_description

type: keyword

netflow.interface_name

type: keyword

netflow.intermediate_process_id

type: long

netflow.internal_address_realm

type: short

netflow.ip_class_of_service

type: short

netflow.ip_diff_serv_code_point

type: short

netflow.ip_header_length

type: short

netflow.ip_header_packet_section

type: short

netflow.ip_next_hop_ipv4_address

type: ip

netflow.ip_next_hop_ipv6_address

type: ip

netflow.ip_payload_length

type: long

netflow.ip_payload_packet_section

type: short

netflow.ip_precedence

type: short

netflow.ip_sec_spi

type: long

netflow.ip_total_length

type: long

netflow.ip_ttl

type: short

netflow.ip_version

type: short

netflow.ipv4_ihl

type: short

netflow.ipv4_options

type: long

netflow.ipv4_router_sc

type: ip

netflow.ipv6_extension_headers

type: long

netflow.is_multicast

type: short

netflow.ixia_browser_id

type: short

netflow.ixia_browser_name

type: keyword

netflow.ixia_device_id

type: short

netflow.ixia_device_name

type: keyword

netflow.ixia_dns_answer

type: keyword

netflow.ixia_dns_classes

type: keyword

netflow.ixia_dns_query

type: keyword

netflow.ixia_dns_record_txt

type: keyword

netflow.ixia_dst_as_name

type: keyword

netflow.ixia_dst_city_name

type: keyword

netflow.ixia_dst_country_code

type: keyword

netflow.ixia_dst_country_name

type: keyword

netflow.ixia_dst_latitude

type: float

netflow.ixia_dst_longitude

type: float

netflow.ixia_dst_region_code

type: keyword

netflow.ixia_dst_region_node

type: keyword

netflow.ixia_encrypt_cipher

type: keyword

netflow.ixia_encrypt_key_length

type: integer

netflow.ixia_encrypt_type

type: keyword

netflow.ixia_http_host_name

type: keyword

netflow.ixia_http_uri

type: keyword

netflow.ixia_http_user_agent

type: keyword

netflow.ixia_imsi_subscriber

type: keyword

netflow.ixia_l7_app_id

type: long

netflow.ixia_l7_app_name

type: keyword

netflow.ixia_latency

type: long

netflow.ixia_rev_octet_delta_count

type: long

netflow.ixia_rev_packet_delta_count

type: long

netflow.ixia_src_as_name

type: keyword

netflow.ixia_src_city_name

type: keyword

netflow.ixia_src_country_code

type: keyword

netflow.ixia_src_country_name

type: keyword

netflow.ixia_src_latitude

type: float

netflow.ixia_src_longitude

type: float

netflow.ixia_src_region_code

type: keyword

netflow.ixia_src_region_name

type: keyword

netflow.ixia_threat_ipv4

type: ip

netflow.ixia_threat_ipv6

type: ip

netflow.ixia_threat_type

type: keyword

netflow.large_packet_count

type: long

netflow.layer2_frame_delta_count

type: long

netflow.layer2_frame_total_count

type: long

netflow.layer2_octet_delta_count

type: long

netflow.layer2_octet_delta_sum_of_squares

type: long

netflow.layer2_octet_total_count

type: long

netflow.layer2_octet_total_sum_of_squares

type: long

netflow.layer2_segment_id

type: long

netflow.layer2packet_section_data

type: short

netflow.layer2packet_section_offset

type: integer

netflow.layer2packet_section_size

type: integer

netflow.line_card_id

type: long

netflow.log_op

type: short

netflow.lower_ci_limit

type: double

netflow.mark

type: long

netflow.max_bib_entries

type: long

netflow.max_entries_per_user

type: long

netflow.max_export_seconds

type: date

netflow.max_flow_end_microseconds

type: date

netflow.max_flow_end_milliseconds

type: date

netflow.max_flow_end_nanoseconds

type: date

netflow.max_flow_end_seconds

type: date

netflow.max_fragments_pending_reassembly

type: long

netflow.max_packet_size

type: integer

netflow.max_session_entries

type: long

netflow.max_subscribers

type: long

netflow.maximum_ip_total_length

type: long

netflow.maximum_layer2_total_length

type: long

netflow.maximum_ttl

type: short

netflow.mean_flow_rate

type: long

netflow.mean_packet_rate

type: long

netflow.message_md5_checksum

type: short

netflow.message_scope

type: short

netflow.metering_process_id

type: long

netflow.metro_evc_id

type: keyword

netflow.metro_evc_type

type: short

netflow.mib_capture_time_semantics

type: short

netflow.mib_context_engine_id

type: short

netflow.mib_context_name

type: keyword

netflow.mib_index_indicator

type: long

netflow.mib_module_name

type: keyword

netflow.mib_object_description

type: keyword

netflow.mib_object_identifier

type: short

netflow.mib_object_name

type: keyword

netflow.mib_object_syntax

type: keyword

netflow.mib_object_value_bits

type: short

netflow.mib_object_value_counter

type: long

netflow.mib_object_value_gauge

type: long

netflow.mib_object_value_integer

type: integer

netflow.mib_object_value_ip_address

type: ip

netflow.mib_object_value_octet_string

type: short

netflow.mib_object_value_oid

type: short

netflow.mib_object_value_time_ticks

type: long

netflow.mib_object_value_unsigned

type: long

netflow.mib_sub_identifier

type: long

netflow.min_export_seconds

type: date

netflow.min_flow_start_microseconds

type: date

netflow.min_flow_start_milliseconds

type: date

netflow.min_flow_start_nanoseconds

type: date

netflow.min_flow_start_seconds

type: date

netflow.minimum_ip_total_length

type: long

netflow.minimum_layer2_total_length

type: long

netflow.minimum_ttl

type: short

netflow.mobile_imsi

type: keyword

netflow.mobile_msisdn

type: keyword

netflow.monitoring_interval_end_milli_seconds

type: date

netflow.monitoring_interval_start_milli_seconds

type: date

netflow.mpls_label_stack_depth

type: long

netflow.mpls_label_stack_length

type: long

netflow.mpls_label_stack_section

type: short

netflow.mpls_label_stack_section10

type: short

netflow.mpls_label_stack_section2

type: short

netflow.mpls_label_stack_section3

type: short

netflow.mpls_label_stack_section4

type: short

netflow.mpls_label_stack_section5

type: short

netflow.mpls_label_stack_section6

type: short

netflow.mpls_label_stack_section7

type: short

netflow.mpls_label_stack_section8

type: short

netflow.mpls_label_stack_section9

type: short

netflow.mpls_payload_length

type: long

netflow.mpls_payload_packet_section

type: short

netflow.mpls_top_label_exp

type: short

netflow.mpls_top_label_ipv4_address

type: ip

netflow.mpls_top_label_ipv6_address

type: ip

netflow.mpls_top_label_prefix_length

type: short

netflow.mpls_top_label_stack_section

type: short

netflow.mpls_top_label_ttl

type: short

netflow.mpls_top_label_type

type: short

netflow.mpls_vpn_route_distinguisher

type: short

netflow.mptcp_address_id

type: short

netflow.mptcp_flags

type: short

netflow.mptcp_initial_data_sequence_number

type: long

netflow.mptcp_maximum_segment_size

type: integer

netflow.mptcp_receiver_token

type: long

netflow.multicast_replication_factor

type: long

netflow.nat_event

type: short

netflow.nat_inside_svcid

type: integer

netflow.nat_instance_id

type: long

netflow.nat_originating_address_realm

type: short

netflow.nat_outside_svcid

type: integer

netflow.nat_pool_id

type: long

netflow.nat_pool_name

type: keyword

netflow.nat_quota_exceeded_event

type: long

netflow.nat_sub_string

type: keyword

netflow.nat_threshold_event

type: long

netflow.nat_type

type: short

netflow.netscale_ica_client_version

type: keyword

netflow.netscaler_aaa_username

type: keyword

netflow.netscaler_app_name

type: keyword

netflow.netscaler_app_name_app_id

type: long

netflow.netscaler_app_name_incarnation_number

type: long

netflow.netscaler_app_template_name

type: keyword

netflow.netscaler_app_unit_name_app_id

type: long

netflow.netscaler_application_startup_duration

type: long

netflow.netscaler_application_startup_time

type: long

netflow.netscaler_cache_redir_client_connection_core_id

type: long

netflow.netscaler_cache_redir_client_connection_transaction_id

type: long

netflow.netscaler_client_rtt

type: long

netflow.netscaler_connection_chain_hop_count

type: long

netflow.netscaler_connection_chain_id

type: short

netflow.netscaler_connection_id

type: long

netflow.netscaler_current_license_consumed

type: long

netflow.netscaler_db_clt_host_name

type: keyword

netflow.netscaler_db_database_name

type: keyword

netflow.netscaler_db_login_flags

type: long

netflow.netscaler_db_protocol_name

type: short

netflow.netscaler_db_req_string

type: keyword

netflow.netscaler_db_req_type

type: short

netflow.netscaler_db_resp_length

type: long

netflow.netscaler_db_resp_status

type: long

netflow.netscaler_db_resp_status_string

type: keyword

netflow.netscaler_db_user_name

type: keyword

netflow.netscaler_flow_flags

type: long

netflow.netscaler_http_client_interaction_end_time

type: keyword

netflow.netscaler_http_client_interaction_start_time

type: keyword

netflow.netscaler_http_client_render_end_time

type: keyword

netflow.netscaler_http_client_render_start_time

type: keyword

netflow.netscaler_http_content_type

type: keyword

netflow.netscaler_http_domain_name

type: keyword

netflow.netscaler_http_req_authorization

type: keyword

netflow.netscaler_http_req_cookie

type: keyword

netflow.netscaler_http_req_forw_fb

type: long

netflow.netscaler_http_req_forw_lb

type: long

netflow.netscaler_http_req_host

type: keyword

netflow.netscaler_http_req_method

type: keyword

netflow.netscaler_http_req_rcv_fb

type: long

netflow.netscaler_http_req_rcv_lb

type: long

netflow.netscaler_http_req_referer

type: keyword

netflow.netscaler_http_req_url

type: keyword

netflow.netscaler_http_req_user_agent

type: keyword

netflow.netscaler_http_req_via

type: keyword

netflow.netscaler_http_req_xforwarded_for

type: keyword

netflow.netscaler_http_res_forw_fb

type: long

netflow.netscaler_http_res_forw_lb

type: long

netflow.netscaler_http_res_location

type: keyword

netflow.netscaler_http_res_rcv_fb

type: long

netflow.netscaler_http_res_rcv_lb

type: long

netflow.netscaler_http_res_set_cookie

type: keyword

netflow.netscaler_http_res_set_cookie2

type: keyword

netflow.netscaler_http_rsp_len

type: long

netflow.netscaler_http_rsp_status

type: integer

netflow.netscaler_ica_app_module_path

type: keyword

netflow.netscaler_ica_app_process_id

type: long

netflow.netscaler_ica_application_name

type: keyword

netflow.netscaler_ica_application_termination_time

type: long

netflow.netscaler_ica_application_termination_type

type: integer

netflow.netscaler_ica_channel_id1

type: long

netflow.netscaler_ica_channel_id1_bytes

type: long

netflow.netscaler_ica_channel_id2

type: long

netflow.netscaler_ica_channel_id2_bytes

type: long

netflow.netscaler_ica_channel_id3

type: long

netflow.netscaler_ica_channel_id3_bytes

type: long

netflow.netscaler_ica_channel_id4

type: long

netflow.netscaler_ica_channel_id4_bytes

type: long

netflow.netscaler_ica_channel_id5

type: long

netflow.netscaler_ica_channel_id5_bytes

type: long

netflow.netscaler_ica_client_host_name

type: keyword

netflow.netscaler_ica_client_ip

type: ip

netflow.netscaler_ica_client_launcher

type: integer

netflow.netscaler_ica_client_side_rto_count

type: integer

netflow.netscaler_ica_client_side_window_size

type: integer

netflow.netscaler_ica_client_type

type: integer

netflow.netscaler_ica_clientside_delay

type: long

netflow.netscaler_ica_clientside_jitter

type: long

netflow.netscaler_ica_clientside_packets_retransmit

type: integer

netflow.netscaler_ica_clientside_rtt

type: long

netflow.netscaler_ica_clientside_rx_bytes

type: long

netflow.netscaler_ica_clientside_srtt

type: long

netflow.netscaler_ica_clientside_tx_bytes

type: long

netflow.netscaler_ica_connection_priority

type: integer

netflow.netscaler_ica_device_serial_no

type: long

netflow.netscaler_ica_domain_name

type: keyword

netflow.netscaler_ica_flags

type: long

netflow.netscaler_ica_host_delay

type: long

netflow.netscaler_ica_l7_client_latency

type: long

netflow.netscaler_ica_l7_server_latency

type: long

netflow.netscaler_ica_launch_mechanism

type: integer

netflow.netscaler_ica_network_update_end_time

type: long

netflow.netscaler_ica_network_update_start_time

type: long

netflow.netscaler_ica_rtt

type: long

netflow.netscaler_ica_server_name

type: keyword

netflow.netscaler_ica_server_side_rto_count

type: integer

netflow.netscaler_ica_server_side_window_size

type: integer

netflow.netscaler_ica_serverside_delay

type: long

netflow.netscaler_ica_serverside_jitter

type: long

netflow.netscaler_ica_serverside_packets_retransmit

type: integer

netflow.netscaler_ica_serverside_rtt

type: long

netflow.netscaler_ica_serverside_srtt

type: long

netflow.netscaler_ica_session_end_time

type: long

netflow.netscaler_ica_session_guid

type: short

netflow.netscaler_ica_session_reconnects

type: short

netflow.netscaler_ica_session_setup_time

type: long

netflow.netscaler_ica_session_update_begin_sec

type: long

netflow.netscaler_ica_session_update_end_sec

type: long

netflow.netscaler_ica_username

type: keyword

netflow.netscaler_license_type

type: short

netflow.netscaler_main_page_core_id

type: long

netflow.netscaler_main_page_id

type: long

netflow.netscaler_max_license_count

type: long

netflow.netscaler_msi_client_cookie

type: short

netflow.netscaler_round_trip_time

type: long

netflow.netscaler_server_ttfb

type: long

netflow.netscaler_server_ttlb

type: long

netflow.netscaler_syslog_message

type: keyword

netflow.netscaler_syslog_priority

type: short

netflow.netscaler_syslog_timestamp

type: long

netflow.netscaler_transaction_id

type: long

netflow.netscaler_unknown270

type: long

netflow.netscaler_unknown271

type: long

netflow.netscaler_unknown272

type: long

netflow.netscaler_unknown273

type: long

netflow.netscaler_unknown274

type: long

netflow.netscaler_unknown275

type: long

netflow.netscaler_unknown276

type: long

netflow.netscaler_unknown277

type: long

netflow.netscaler_unknown278

type: long

netflow.netscaler_unknown279

type: long

netflow.netscaler_unknown280

type: long

netflow.netscaler_unknown281

type: long

netflow.netscaler_unknown282

type: long

netflow.netscaler_unknown283

type: long

netflow.netscaler_unknown284

type: long

netflow.netscaler_unknown285

type: long

netflow.netscaler_unknown286

type: long

netflow.netscaler_unknown287

type: long

netflow.netscaler_unknown288

type: long

netflow.netscaler_unknown289

type: long

netflow.netscaler_unknown290

type: long

netflow.netscaler_unknown291

type: long

netflow.netscaler_unknown292

type: long

netflow.netscaler_unknown293

type: long

netflow.netscaler_unknown294

type: long

netflow.netscaler_unknown295

type: long

netflow.netscaler_unknown296

type: long

netflow.netscaler_unknown297

type: long

netflow.netscaler_unknown298

type: long

netflow.netscaler_unknown299

type: long

netflow.netscaler_unknown300

type: long

netflow.netscaler_unknown301

type: long

netflow.netscaler_unknown302

type: long

netflow.netscaler_unknown303

type: long

netflow.netscaler_unknown304

type: long

netflow.netscaler_unknown305

type: long

netflow.netscaler_unknown306

type: long

netflow.netscaler_unknown307

type: long

netflow.netscaler_unknown308

type: long

netflow.netscaler_unknown309

type: long

netflow.netscaler_unknown310

type: long

netflow.netscaler_unknown311

type: long

netflow.netscaler_unknown312

type: long

netflow.netscaler_unknown313

type: long

netflow.netscaler_unknown314

type: long

netflow.netscaler_unknown315

type: long

netflow.netscaler_unknown316

type: keyword

netflow.netscaler_unknown317

type: long

netflow.netscaler_unknown318

type: long

netflow.netscaler_unknown319

type: keyword

netflow.netscaler_unknown320

type: integer

netflow.netscaler_unknown321

type: long

netflow.netscaler_unknown322

type: long

netflow.netscaler_unknown323

type: integer

netflow.netscaler_unknown324

type: integer

netflow.netscaler_unknown325

type: integer

netflow.netscaler_unknown326

type: integer

netflow.netscaler_unknown327

type: long

netflow.netscaler_unknown328

type: integer

netflow.netscaler_unknown329

type: integer

netflow.netscaler_unknown330

type: integer

netflow.netscaler_unknown331

type: integer

netflow.netscaler_unknown332

type: long

netflow.netscaler_unknown333

type: keyword

netflow.netscaler_unknown334

type: keyword

netflow.netscaler_unknown335

type: long

netflow.netscaler_unknown336

type: long

netflow.netscaler_unknown337

type: long

netflow.netscaler_unknown338

type: long

netflow.netscaler_unknown339

type: long

netflow.netscaler_unknown340

type: long

netflow.netscaler_unknown341

type: long

netflow.netscaler_unknown342

type: long

netflow.netscaler_unknown343

type: long

netflow.netscaler_unknown344

type: long

netflow.netscaler_unknown345

type: long

netflow.netscaler_unknown346

type: long

netflow.netscaler_unknown347

type: long

netflow.netscaler_unknown348

type: integer

netflow.netscaler_unknown349

type: keyword

netflow.netscaler_unknown350

type: keyword

netflow.netscaler_unknown351

type: keyword

netflow.netscaler_unknown352

type: integer

netflow.netscaler_unknown353

type: long

netflow.netscaler_unknown354

type: long

netflow.netscaler_unknown355

type: long

netflow.netscaler_unknown356

type: long

netflow.netscaler_unknown357

type: long

netflow.netscaler_unknown363

type: short

netflow.netscaler_unknown383

type: short

netflow.netscaler_unknown391

type: long

netflow.netscaler_unknown398

type: long

netflow.netscaler_unknown404

type: long

netflow.netscaler_unknown405

type: long

netflow.netscaler_unknown427

type: long

netflow.netscaler_unknown429

type: short

netflow.netscaler_unknown432

type: short

netflow.netscaler_unknown433

type: short

netflow.netscaler_unknown453

type: long

netflow.netscaler_unknown465

type: long

netflow.new_connection_delta_count

type: long

netflow.next_header_ipv6

type: short

netflow.non_empty_packet_count

type: long

netflow.not_sent_flow_total_count

type: long

netflow.not_sent_layer2_octet_total_count

type: long

netflow.not_sent_octet_total_count

type: long

netflow.not_sent_packet_total_count

type: long

netflow.observation_domain_id

type: long

netflow.observation_domain_name

type: keyword

netflow.observation_point_id

type: long

netflow.observation_point_type

type: short

netflow.observation_time_microseconds

type: date

netflow.observation_time_milliseconds

type: date

netflow.observation_time_nanoseconds

type: date

netflow.observation_time_seconds

type: date

netflow.observed_flow_total_count

type: long

netflow.octet_delta_count

type: long

netflow.octet_delta_sum_of_squares

type: long

netflow.octet_total_count

type: long

netflow.octet_total_sum_of_squares

type: long

netflow.opaque_octets

type: short

netflow.original_exporter_ipv4_address

type: ip

netflow.original_exporter_ipv6_address

type: ip

netflow.original_flows_completed

type: long

netflow.original_flows_initiated

type: long

netflow.original_flows_present

type: long

netflow.original_observation_domain_id

type: long

netflow.os_finger_print

type: keyword

netflow.os_name

type: keyword

netflow.os_version

type: keyword

netflow.p2p_technology

type: keyword

netflow.packet_delta_count

type: long

netflow.packet_total_count

type: long

netflow.padding_octets

type: short

netflow.payload

type: keyword

netflow.payload_entropy

type: short

netflow.payload_length_ipv6

type: integer

netflow.policy_qos_classification_hierarchy

type: long

netflow.policy_qos_queue_index

type: long

netflow.policy_qos_queuedrops

type: long

netflow.policy_qos_queueindex

type: long

netflow.port_id

type: long

netflow.port_range_end

type: integer

netflow.port_range_num_ports

type: integer

netflow.port_range_start

type: integer

netflow.port_range_step_size

type: integer

netflow.post_destination_mac_address

type: keyword

netflow.post_dot1q_customer_vlan_id

type: integer

netflow.post_dot1q_vlan_id

type: integer

netflow.post_ip_class_of_service

type: short

netflow.post_ip_diff_serv_code_point

type: short

netflow.post_ip_precedence

type: short

netflow.post_layer2_octet_delta_count

type: long

netflow.post_layer2_octet_total_count

type: long

netflow.post_mcast_layer2_octet_delta_count

type: long

netflow.post_mcast_layer2_octet_total_count

type: long

netflow.post_mcast_octet_delta_count

type: long

netflow.post_mcast_octet_total_count

type: long

netflow.post_mcast_packet_delta_count

type: long

netflow.post_mcast_packet_total_count

type: long

netflow.post_mpls_top_label_exp

type: short

netflow.post_napt_destination_transport_port

type: integer

netflow.post_napt_source_transport_port

type: integer

netflow.post_nat_destination_ipv4_address

type: ip

netflow.post_nat_destination_ipv6_address

type: ip

netflow.post_nat_source_ipv4_address

type: ip

netflow.post_nat_source_ipv6_address

type: ip

netflow.post_octet_delta_count

type: long

netflow.post_octet_total_count

type: long

netflow.post_packet_delta_count

type: long

netflow.post_packet_total_count

type: long

netflow.post_source_mac_address

type: keyword

netflow.post_vlan_id

type: integer

netflow.private_enterprise_number

type: long

netflow.procera_apn

type: keyword

netflow.procera_base_service

type: keyword

netflow.procera_content_categories

type: keyword

netflow.procera_device_id

type: long

netflow.procera_external_rtt

type: integer

netflow.procera_flow_behavior

type: keyword

netflow.procera_ggsn

type: keyword

netflow.procera_http_content_type

type: keyword

netflow.procera_http_file_length

type: long

netflow.procera_http_language

type: keyword

netflow.procera_http_location

type: keyword

netflow.procera_http_referer

type: keyword

netflow.procera_http_request_method

type: keyword

netflow.procera_http_request_version

type: keyword

netflow.procera_http_response_status

type: integer

netflow.procera_http_url

type: keyword

netflow.procera_http_user_agent

type: keyword

netflow.procera_imsi

type: long

netflow.procera_incoming_octets

type: long

netflow.procera_incoming_packets

type: long

netflow.procera_incoming_shaping_drops

type: long

netflow.procera_incoming_shaping_latency

type: integer

netflow.procera_internal_rtt

type: integer

netflow.procera_local_ipv4_host

type: ip

netflow.procera_local_ipv6_host

type: ip

netflow.procera_msisdn

type: long

netflow.procera_outgoing_octets

type: long

netflow.procera_outgoing_packets

type: long

netflow.procera_outgoing_shaping_drops

type: long

netflow.procera_outgoing_shaping_latency

type: integer

netflow.procera_property

type: keyword

netflow.procera_qoe_incoming_external

type: float

netflow.procera_qoe_incoming_internal

type: float

netflow.procera_qoe_outgoing_external

type: float

netflow.procera_qoe_outgoing_internal

type: float

netflow.procera_rat

type: keyword

netflow.procera_remote_ipv4_host

type: ip

netflow.procera_remote_ipv6_host

type: ip

netflow.procera_rnc

type: integer

netflow.procera_server_hostname

type: keyword

netflow.procera_service

type: keyword

netflow.procera_sgsn

type: keyword

netflow.procera_subscriber_identifier

type: keyword

netflow.procera_template_name

type: keyword

netflow.procera_user_location_information

type: keyword

netflow.protocol_identifier

type: short

netflow.pseudo_wire_control_word

type: long

netflow.pseudo_wire_destination_ipv4_address

type: ip

netflow.pseudo_wire_id

type: long

netflow.pseudo_wire_type

type: integer

netflow.reason

type: long

netflow.reason_text

type: keyword

netflow.relative_error

type: double

netflow.responder_octets

type: long

netflow.responder_packets

type: long

netflow.reverse_absolute_error

type: double

netflow.reverse_anonymization_flags

type: integer

netflow.reverse_anonymization_technique

type: integer

netflow.reverse_application_category_name

type: keyword

netflow.reverse_application_description

type: keyword

netflow.reverse_application_group_name

type: keyword

netflow.reverse_application_id

type: keyword

netflow.reverse_application_name

type: keyword

netflow.reverse_application_sub_category_name

type: keyword

netflow.reverse_average_interarrival_time

type: long

netflow.reverse_bgp_destination_as_number

type: long

netflow.reverse_bgp_next_adjacent_as_number

type: long

netflow.reverse_bgp_next_hop_ipv4_address

type: ip

netflow.reverse_bgp_next_hop_ipv6_address

type: ip

netflow.reverse_bgp_prev_adjacent_as_number

type: long

netflow.reverse_bgp_source_as_number

type: long

netflow.reverse_bgp_validity_state

type: short

netflow.reverse_class_id

type: short

netflow.reverse_class_name

type: keyword

netflow.reverse_classification_engine_id

type: short

netflow.reverse_collection_time_milliseconds

type: long

netflow.reverse_collector_certificate

type: keyword

netflow.reverse_confidence_level

type: double

netflow.reverse_connection_sum_duration_seconds

type: long

netflow.reverse_connection_transaction_id

type: long

netflow.reverse_data_byte_count

type: long

netflow.reverse_data_link_frame_section

type: keyword

netflow.reverse_data_link_frame_size

type: integer

netflow.reverse_data_link_frame_type

type: integer

netflow.reverse_data_records_reliability

type: short

netflow.reverse_delta_flow_count

type: long

netflow.reverse_destination_ipv4_address

type: ip

netflow.reverse_destination_ipv4_prefix

type: ip

netflow.reverse_destination_ipv4_prefix_length

type: short

netflow.reverse_destination_ipv6_address

type: ip

netflow.reverse_destination_ipv6_prefix

type: ip

netflow.reverse_destination_ipv6_prefix_length

type: short

netflow.reverse_destination_mac_address

type: keyword

netflow.reverse_destination_transport_port

type: integer

netflow.reverse_digest_hash_value

type: long

netflow.reverse_distinct_count_of_destination_ip_address

type: long

netflow.reverse_distinct_count_of_destination_ipv4_address

type: long

netflow.reverse_distinct_count_of_destination_ipv6_address

type: long

netflow.reverse_distinct_count_of_source_ip_address

type: long

netflow.reverse_distinct_count_of_source_ipv4_address

type: long

netflow.reverse_distinct_count_of_source_ipv6_address

type: long

netflow.reverse_dot1q_customer_dei

type: short

netflow.reverse_dot1q_customer_destination_mac_address

type: keyword

netflow.reverse_dot1q_customer_priority

type: short

netflow.reverse_dot1q_customer_source_mac_address

type: keyword

netflow.reverse_dot1q_customer_vlan_id

type: integer

netflow.reverse_dot1q_dei

type: short

netflow.reverse_dot1q_priority

type: short

netflow.reverse_dot1q_service_instance_id

type: long

netflow.reverse_dot1q_service_instance_priority

type: short

netflow.reverse_dot1q_service_instance_tag

type: keyword

netflow.reverse_dot1q_vlan_id

type: integer

netflow.reverse_dropped_layer2_octet_delta_count

type: long

netflow.reverse_dropped_layer2_octet_total_count

type: long

netflow.reverse_dropped_octet_delta_count

type: long

netflow.reverse_dropped_octet_total_count

type: long

netflow.reverse_dropped_packet_delta_count

type: long

netflow.reverse_dropped_packet_total_count

type: long

netflow.reverse_dst_traffic_index

type: long

netflow.reverse_egress_broadcast_packet_total_count

type: long

netflow.reverse_egress_interface

type: long

netflow.reverse_egress_interface_type

type: long

netflow.reverse_egress_physical_interface

type: long

netflow.reverse_egress_unicast_packet_total_count

type: long

netflow.reverse_egress_vrfid

type: long

netflow.reverse_encrypted_technology

type: keyword

netflow.reverse_engine_id

type: short

netflow.reverse_engine_type

type: short

netflow.reverse_ethernet_header_length

type: short

netflow.reverse_ethernet_payload_length

type: integer

netflow.reverse_ethernet_total_length

type: integer

netflow.reverse_ethernet_type

type: integer

netflow.reverse_export_sctp_stream_id

type: integer

netflow.reverse_exporter_certificate

type: keyword

netflow.reverse_exporting_process_id

type: long

netflow.reverse_firewall_event

type: short

netflow.reverse_first_non_empty_packet_size

type: integer

netflow.reverse_first_packet_banner

type: keyword

netflow.reverse_flags_and_sampler_id

type: long

netflow.reverse_flow_active_timeout

type: integer

netflow.reverse_flow_attributes

type: integer

netflow.reverse_flow_delta_milliseconds

type: long

netflow.reverse_flow_direction

type: short

netflow.reverse_flow_duration_microseconds

type: long

netflow.reverse_flow_duration_milliseconds

type: long

netflow.reverse_flow_end_delta_microseconds

type: long

netflow.reverse_flow_end_microseconds

type: long

netflow.reverse_flow_end_milliseconds

type: long

netflow.reverse_flow_end_nanoseconds

type: long

netflow.reverse_flow_end_reason

type: short

netflow.reverse_flow_end_seconds

type: long

netflow.reverse_flow_end_sys_up_time

type: long

netflow.reverse_flow_idle_timeout

type: integer

netflow.reverse_flow_label_ipv6

type: long

netflow.reverse_flow_sampling_time_interval

type: long

netflow.reverse_flow_sampling_time_spacing

type: long

netflow.reverse_flow_selected_flow_delta_count

type: long

netflow.reverse_flow_selected_octet_delta_count

type: long

netflow.reverse_flow_selected_packet_delta_count

type: long

netflow.reverse_flow_selector_algorithm

type: integer

netflow.reverse_flow_start_delta_microseconds

type: long

netflow.reverse_flow_start_microseconds

type: long

netflow.reverse_flow_start_milliseconds

type: long

netflow.reverse_flow_start_nanoseconds

type: long

netflow.reverse_flow_start_seconds

type: long

netflow.reverse_flow_start_sys_up_time

type: long

netflow.reverse_forwarding_status

type: long

netflow.reverse_fragment_flags

type: short

netflow.reverse_fragment_identification

type: long

netflow.reverse_fragment_offset

type: integer

netflow.reverse_gre_key

type: long

netflow.reverse_hash_digest_output

type: short

netflow.reverse_hash_flow_domain

type: integer

netflow.reverse_hash_initialiser_value

type: long

netflow.reverse_hash_ip_payload_offset

type: long

netflow.reverse_hash_ip_payload_size

type: long

netflow.reverse_hash_output_range_max

type: long

netflow.reverse_hash_output_range_min

type: long

netflow.reverse_hash_selected_range_max

type: long

netflow.reverse_hash_selected_range_min

type: long

netflow.reverse_icmp_code_ipv4

type: short

netflow.reverse_icmp_code_ipv6

type: short

netflow.reverse_icmp_type_code_ipv4

type: integer

netflow.reverse_icmp_type_code_ipv6

type: integer

netflow.reverse_icmp_type_ipv4

type: short

netflow.reverse_icmp_type_ipv6

type: short

netflow.reverse_igmp_type

type: short

netflow.reverse_ignored_data_record_total_count

type: long

netflow.reverse_ignored_layer2_frame_total_count

type: long

netflow.reverse_ignored_layer2_octet_total_count

type: long

netflow.reverse_information_element_data_type

type: short

netflow.reverse_information_element_description

type: keyword

netflow.reverse_information_element_id

type: integer

netflow.reverse_information_element_index

type: integer

netflow.reverse_information_element_name

type: keyword

netflow.reverse_information_element_range_begin

type: long

netflow.reverse_information_element_range_end

type: long

netflow.reverse_information_element_semantics

type: short

netflow.reverse_information_element_units

type: integer

netflow.reverse_ingress_broadcast_packet_total_count

type: long

netflow.reverse_ingress_interface

type: long

netflow.reverse_ingress_interface_type

type: long

netflow.reverse_ingress_multicast_packet_total_count

type: long

netflow.reverse_ingress_physical_interface

type: long

netflow.reverse_ingress_unicast_packet_total_count

type: long

netflow.reverse_ingress_vrfid

type: long

netflow.reverse_initial_tcp_flags

type: short

netflow.reverse_initiator_octets

type: long

netflow.reverse_initiator_packets

type: long

netflow.reverse_interface_description

type: keyword

netflow.reverse_interface_name

type: keyword

netflow.reverse_intermediate_process_id

type: long

netflow.reverse_ip_class_of_service

type: short

netflow.reverse_ip_diff_serv_code_point

type: short

netflow.reverse_ip_header_length

type: short

netflow.reverse_ip_header_packet_section

type: keyword

netflow.reverse_ip_next_hop_ipv4_address

type: ip

netflow.reverse_ip_next_hop_ipv6_address

type: ip

netflow.reverse_ip_payload_length

type: long

netflow.reverse_ip_payload_packet_section

type: keyword

netflow.reverse_ip_precedence

type: short

netflow.reverse_ip_sec_spi

type: long

netflow.reverse_ip_total_length

type: long

netflow.reverse_ip_ttl

type: short

netflow.reverse_ip_version

type: short

netflow.reverse_ipv4_ihl

type: short

netflow.reverse_ipv4_options

type: long

netflow.reverse_ipv4_router_sc

type: ip

netflow.reverse_ipv6_extension_headers

type: long

netflow.reverse_is_multicast

type: short

netflow.reverse_large_packet_count

type: long

netflow.reverse_layer2_frame_delta_count

type: long

netflow.reverse_layer2_frame_total_count

type: long

netflow.reverse_layer2_octet_delta_count

type: long

netflow.reverse_layer2_octet_delta_sum_of_squares

type: long

netflow.reverse_layer2_octet_total_count

type: long

netflow.reverse_layer2_octet_total_sum_of_squares

type: long

netflow.reverse_layer2_segment_id

type: long

netflow.reverse_layer2packet_section_data

type: keyword

netflow.reverse_layer2packet_section_offset

type: integer

netflow.reverse_layer2packet_section_size

type: integer

netflow.reverse_line_card_id

type: long

netflow.reverse_lower_ci_limit

type: double

netflow.reverse_max_export_seconds

type: long

netflow.reverse_max_flow_end_microseconds

type: long

netflow.reverse_max_flow_end_milliseconds

type: long

netflow.reverse_max_flow_end_nanoseconds

type: long

netflow.reverse_max_flow_end_seconds

type: long

netflow.reverse_max_packet_size

type: integer

netflow.reverse_maximum_ip_total_length

type: long

netflow.reverse_maximum_layer2_total_length

type: long

netflow.reverse_maximum_ttl

type: short

netflow.reverse_message_md5_checksum

type: keyword

netflow.reverse_message_scope

type: short

netflow.reverse_metering_process_id

type: long

netflow.reverse_metro_evc_id

type: keyword

netflow.reverse_metro_evc_type

type: short

netflow.reverse_min_export_seconds

type: long

netflow.reverse_min_flow_start_microseconds

type: long

netflow.reverse_min_flow_start_milliseconds

type: long

netflow.reverse_min_flow_start_nanoseconds

type: long

netflow.reverse_min_flow_start_seconds

type: long

netflow.reverse_minimum_ip_total_length

type: long

netflow.reverse_minimum_layer2_total_length

type: long

netflow.reverse_minimum_ttl

type: short

netflow.reverse_monitoring_interval_end_milli_seconds

type: long

netflow.reverse_monitoring_interval_start_milli_seconds

type: long

netflow.reverse_mpls_label_stack_depth

type: long

netflow.reverse_mpls_label_stack_length

type: long

netflow.reverse_mpls_label_stack_section

type: keyword

netflow.reverse_mpls_label_stack_section10

type: keyword

netflow.reverse_mpls_label_stack_section2

type: keyword

netflow.reverse_mpls_label_stack_section3

type: keyword

netflow.reverse_mpls_label_stack_section4

type: keyword

netflow.reverse_mpls_label_stack_section5

type: keyword

netflow.reverse_mpls_label_stack_section6

type: keyword

netflow.reverse_mpls_label_stack_section7

type: keyword

netflow.reverse_mpls_label_stack_section8

type: keyword

netflow.reverse_mpls_label_stack_section9

type: keyword

netflow.reverse_mpls_payload_length

type: long

netflow.reverse_mpls_payload_packet_section

type: keyword

netflow.reverse_mpls_top_label_exp

type: short

netflow.reverse_mpls_top_label_ipv4_address

type: ip

netflow.reverse_mpls_top_label_ipv6_address

type: ip

netflow.reverse_mpls_top_label_prefix_length

type: short

netflow.reverse_mpls_top_label_stack_section

type: keyword

netflow.reverse_mpls_top_label_ttl

type: short

netflow.reverse_mpls_top_label_type

type: short

netflow.reverse_mpls_vpn_route_distinguisher

type: keyword

netflow.reverse_multicast_replication_factor

type: long

netflow.reverse_nat_event

type: short

netflow.reverse_nat_originating_address_realm

type: short

netflow.reverse_nat_pool_id

type: long

netflow.reverse_nat_pool_name

type: keyword

netflow.reverse_nat_type

type: short

netflow.reverse_new_connection_delta_count

type: long

netflow.reverse_next_header_ipv6

type: short

netflow.reverse_non_empty_packet_count

type: long

netflow.reverse_not_sent_layer2_octet_total_count

type: long

netflow.reverse_observation_domain_name

type: keyword

netflow.reverse_observation_point_id

type: long

netflow.reverse_observation_point_type

type: short

netflow.reverse_observation_time_microseconds

type: long

netflow.reverse_observation_time_milliseconds

type: long

netflow.reverse_observation_time_nanoseconds

type: long

netflow.reverse_observation_time_seconds

type: long

netflow.reverse_octet_delta_count

type: long

netflow.reverse_octet_delta_sum_of_squares

type: long

netflow.reverse_octet_total_count

type: long

netflow.reverse_octet_total_sum_of_squares

type: long

netflow.reverse_opaque_octets

type: keyword

netflow.reverse_original_exporter_ipv4_address

type: ip

netflow.reverse_original_exporter_ipv6_address

type: ip

netflow.reverse_original_flows_completed

type: long

netflow.reverse_original_flows_initiated

type: long

netflow.reverse_original_flows_present

type: long

netflow.reverse_original_observation_domain_id

type: long

netflow.reverse_os_finger_print

type: keyword

netflow.reverse_os_name

type: keyword

netflow.reverse_os_version

type: keyword

netflow.reverse_p2p_technology

type: keyword

netflow.reverse_packet_delta_count

type: long

netflow.reverse_packet_total_count

type: long

netflow.reverse_payload

type: keyword

netflow.reverse_payload_entropy

type: short

netflow.reverse_payload_length_ipv6

type: integer

netflow.reverse_port_id

type: long

netflow.reverse_port_range_end

type: integer

netflow.reverse_port_range_num_ports

type: integer

netflow.reverse_port_range_start

type: integer

netflow.reverse_port_range_step_size

type: integer

netflow.reverse_post_destination_mac_address

type: keyword

netflow.reverse_post_dot1q_customer_vlan_id

type: integer

netflow.reverse_post_dot1q_vlan_id

type: integer

netflow.reverse_post_ip_class_of_service

type: short

netflow.reverse_post_ip_diff_serv_code_point

type: short

netflow.reverse_post_ip_precedence

type: short

netflow.reverse_post_layer2_octet_delta_count

type: long

netflow.reverse_post_layer2_octet_total_count

type: long

netflow.reverse_post_mcast_layer2_octet_delta_count

type: long

netflow.reverse_post_mcast_layer2_octet_total_count

type: long

netflow.reverse_post_mcast_octet_delta_count

type: long

netflow.reverse_post_mcast_octet_total_count

type: long

netflow.reverse_post_mcast_packet_delta_count

type: long

netflow.reverse_post_mcast_packet_total_count

type: long

netflow.reverse_post_mpls_top_label_exp

type: short

netflow.reverse_post_napt_destination_transport_port

type: integer

netflow.reverse_post_napt_source_transport_port

type: integer

netflow.reverse_post_nat_destination_ipv4_address

type: ip

netflow.reverse_post_nat_destination_ipv6_address

type: ip

netflow.reverse_post_nat_source_ipv4_address

type: ip

netflow.reverse_post_nat_source_ipv6_address

type: ip

netflow.reverse_post_octet_delta_count

type: long

netflow.reverse_post_octet_total_count

type: long

netflow.reverse_post_packet_delta_count

type: long

netflow.reverse_post_packet_total_count

type: long

netflow.reverse_post_source_mac_address

type: keyword

netflow.reverse_post_vlan_id

type: integer

netflow.reverse_private_enterprise_number

type: long

netflow.reverse_protocol_identifier

type: short

netflow.reverse_pseudo_wire_control_word

type: long

netflow.reverse_pseudo_wire_destination_ipv4_address

type: ip

netflow.reverse_pseudo_wire_id

type: long

netflow.reverse_pseudo_wire_type

type: integer

netflow.reverse_relative_error

type: double

netflow.reverse_responder_octets

type: long

netflow.reverse_responder_packets

type: long

netflow.reverse_rfc3550_jitter_microseconds

type: long

netflow.reverse_rfc3550_jitter_milliseconds

type: long

netflow.reverse_rfc3550_jitter_nanoseconds

type: long

netflow.reverse_rtp_payload_type

type: short

netflow.reverse_rtp_sequence_number

type: integer

netflow.reverse_sampler_id

type: short

netflow.reverse_sampler_mode

type: short

netflow.reverse_sampler_name

type: keyword

netflow.reverse_sampler_random_interval

type: long

netflow.reverse_sampling_algorithm

type: short

netflow.reverse_sampling_flow_interval

type: long

netflow.reverse_sampling_flow_spacing

type: long

netflow.reverse_sampling_interval

type: long

netflow.reverse_sampling_packet_interval

type: long

netflow.reverse_sampling_packet_space

type: long

netflow.reverse_sampling_population

type: long

netflow.reverse_sampling_probability

type: double

netflow.reverse_sampling_size

type: long

netflow.reverse_sampling_time_interval

type: long

netflow.reverse_sampling_time_space

type: long

netflow.reverse_second_packet_banner

type: keyword

netflow.reverse_section_exported_octets

type: integer

netflow.reverse_section_offset

type: integer

netflow.reverse_selection_sequence_id

type: long

netflow.reverse_selector_algorithm

type: integer

netflow.reverse_selector_id

type: long

netflow.reverse_selector_id_total_flows_observed

type: long

netflow.reverse_selector_id_total_flows_selected

type: long

netflow.reverse_selector_id_total_pkts_observed

type: long

netflow.reverse_selector_id_total_pkts_selected

type: long

netflow.reverse_selector_name

type: keyword

netflow.reverse_session_scope

type: short

netflow.reverse_small_packet_count

type: long

netflow.reverse_source_ipv4_address

type: ip

netflow.reverse_source_ipv4_prefix

type: ip

netflow.reverse_source_ipv4_prefix_length

type: short

netflow.reverse_source_ipv6_address

type: ip

netflow.reverse_source_ipv6_prefix

type: ip

netflow.reverse_source_ipv6_prefix_length

type: short

netflow.reverse_source_mac_address

type: keyword

netflow.reverse_source_transport_port

type: integer

netflow.reverse_src_traffic_index

type: long

netflow.reverse_sta_ipv4_address

type: ip

netflow.reverse_sta_mac_address

type: keyword

netflow.reverse_standard_deviation_interarrival_time

type: long

netflow.reverse_standard_deviation_payload_length

type: integer

netflow.reverse_system_init_time_milliseconds

type: long

netflow.reverse_tcp_ack_total_count

type: long

netflow.reverse_tcp_acknowledgement_number

type: long

netflow.reverse_tcp_control_bits

type: integer

netflow.reverse_tcp_destination_port

type: integer

netflow.reverse_tcp_fin_total_count

type: long

netflow.reverse_tcp_header_length

type: short

netflow.reverse_tcp_options

type: long

netflow.reverse_tcp_psh_total_count

type: long

netflow.reverse_tcp_rst_total_count

type: long

netflow.reverse_tcp_sequence_number

type: long

netflow.reverse_tcp_source_port

type: integer

netflow.reverse_tcp_syn_total_count

type: long

netflow.reverse_tcp_urg_total_count

type: long

netflow.reverse_tcp_urgent_pointer

type: integer

netflow.reverse_tcp_window_scale

type: integer

netflow.reverse_tcp_window_size

type: integer

netflow.reverse_total_length_ipv4

type: integer

netflow.reverse_transport_octet_delta_count

type: long

netflow.reverse_transport_packet_delta_count

type: long

netflow.reverse_tunnel_technology

type: keyword

netflow.reverse_udp_destination_port

type: integer

netflow.reverse_udp_message_length

type: integer

netflow.reverse_udp_source_port

type: integer

netflow.reverse_union_tcp_flags

type: short

netflow.reverse_upper_ci_limit

type: double

netflow.reverse_user_name

type: keyword

netflow.reverse_value_distribution_method

type: short

netflow.reverse_virtual_station_interface_id

type: keyword

netflow.reverse_virtual_station_interface_name

type: keyword

netflow.reverse_virtual_station_name

type: keyword

netflow.reverse_virtual_station_uuid

type: keyword

netflow.reverse_vlan_id

type: integer

netflow.reverse_vr_fname

type: keyword

netflow.reverse_wlan_channel_id

type: short

netflow.reverse_wlan_ssid

type: keyword

netflow.reverse_wtp_mac_address

type: keyword

netflow.rfc3550_jitter_microseconds

type: long

netflow.rfc3550_jitter_milliseconds

type: long

netflow.rfc3550_jitter_nanoseconds

type: long

netflow.rtp_payload_type

type: short

netflow.rtp_sequence_number

type: integer

netflow.sampler_id

type: short

netflow.sampler_mode

type: short

netflow.sampler_name

type: keyword

netflow.sampler_random_interval

type: long

netflow.sampling_algorithm

type: short

netflow.sampling_flow_interval

type: long

netflow.sampling_flow_spacing

type: long

netflow.sampling_interval

type: long

netflow.sampling_packet_interval

type: long

netflow.sampling_packet_space

type: long

netflow.sampling_population

type: long

netflow.sampling_probability

type: double

netflow.sampling_size

type: long

netflow.sampling_time_interval

type: long

netflow.sampling_time_space

type: long

netflow.second_packet_banner

type: keyword

netflow.section_exported_octets

type: integer

netflow.section_offset

type: integer

netflow.selection_sequence_id

type: long

netflow.selector_algorithm

type: integer

netflow.selector_id

type: long

netflow.selector_id_total_flows_observed

type: long

netflow.selector_id_total_flows_selected

type: long

netflow.selector_id_total_pkts_observed

type: long

netflow.selector_id_total_pkts_selected

type: long

netflow.selector_name

type: keyword

netflow.service_name

type: keyword

netflow.session_scope

type: short

netflow.silk_app_label

type: integer

netflow.small_packet_count

type: long

netflow.source_ipv4_address

type: ip

netflow.source_ipv4_prefix

type: ip

netflow.source_ipv4_prefix_length

type: short

netflow.source_ipv6_address

type: ip

netflow.source_ipv6_prefix

type: ip

netflow.source_ipv6_prefix_length

type: short

netflow.source_mac_address

type: keyword

netflow.source_transport_port

type: integer

netflow.source_transport_ports_limit

type: integer

netflow.src_traffic_index

type: long

netflow.ssl_cert_serial_number

type: keyword

netflow.ssl_cert_signature

type: keyword

netflow.ssl_cert_validity_not_after

type: keyword

netflow.ssl_cert_validity_not_before

type: keyword

netflow.ssl_cert_version

type: short

netflow.ssl_certificate_hash

type: keyword

netflow.ssl_cipher

type: keyword

netflow.ssl_client_version

type: short

netflow.ssl_compression_method

type: short

netflow.ssl_object_type

type: keyword

netflow.ssl_object_value

type: keyword

netflow.ssl_public_key_algorithm

type: keyword

netflow.ssl_public_key_length

type: keyword

netflow.ssl_server_cipher

type: long

netflow.ssl_server_name

type: keyword

netflow.sta_ipv4_address

type: ip

netflow.sta_mac_address

type: keyword

netflow.standard_deviation_interarrival_time

type: long

netflow.standard_deviation_payload_length

type: short

netflow.system_init_time_milliseconds

type: date

netflow.tcp_ack_total_count

type: long

netflow.tcp_acknowledgement_number

type: long

netflow.tcp_control_bits

type: integer

netflow.tcp_destination_port

type: integer

netflow.tcp_fin_total_count

type: long

netflow.tcp_header_length

type: short

netflow.tcp_options

type: long

netflow.tcp_psh_total_count

type: long

netflow.tcp_rst_total_count

type: long

netflow.tcp_sequence_number

type: long

netflow.tcp_source_port

type: integer

netflow.tcp_syn_total_count

type: long

netflow.tcp_urg_total_count

type: long

netflow.tcp_urgent_pointer

type: integer

netflow.tcp_window_scale

type: integer

netflow.tcp_window_size

type: integer

netflow.template_id

type: integer

netflow.tftp_filename

type: keyword

netflow.tftp_mode

type: keyword

netflow.timestamp

type: long

netflow.timestamp_absolute_monitoring-interval

type: long

netflow.total_length_ipv4

type: integer

netflow.traffic_type

type: short

netflow.transport_octet_delta_count

type: long

netflow.transport_packet_delta_count

type: long

netflow.tunnel_technology

type: keyword

netflow.udp_destination_port

type: integer

netflow.udp_message_length

type: integer

netflow.udp_source_port

type: integer

netflow.union_tcp_flags

type: short

netflow.upper_ci_limit

type: double

netflow.user_name

type: keyword

netflow.username

type: keyword

netflow.value_distribution_method

type: short

netflow.viptela_vpn_id

type: long

netflow.virtual_station_interface_id

type: short

netflow.virtual_station_interface_name

type: keyword

netflow.virtual_station_name

type: keyword

netflow.virtual_station_uuid

type: short

netflow.vlan_id

type: integer

netflow.vmware_egress_interface_attr

type: integer

netflow.vmware_ingress_interface_attr

type: integer

netflow.vmware_tenant_dest_ipv4

type: ip

netflow.vmware_tenant_dest_ipv6

type: ip

netflow.vmware_tenant_dest_port

type: integer

netflow.vmware_tenant_protocol

type: short

netflow.vmware_tenant_source_ipv4

type: ip

netflow.vmware_tenant_source_ipv6

type: ip

netflow.vmware_tenant_source_port

type: integer

netflow.vmware_vxlan_export_role

type: short

netflow.vpn_identifier

type: short

netflow.vr_fname

type: keyword

netflow.waasoptimization_segment

type: short

netflow.wlan_channel_id

type: short

netflow.wlan_ssid

type: keyword

netflow.wtp_mac_address

type: keyword

netflow.xlate_destination_address_ip_v4

type: ip

netflow.xlate_destination_port

type: integer

netflow.xlate_source_address_ip_v4

type: ip

netflow.xlate_source_port

type: integer