{ "type":"record", "name":"radius_record", "namespace":"tsg_galaxy_v3", "doc": { "primary_key":"common_log_id", "partition_key":"common_recv_time", "ttl":null, "default_ttl":2592000, "index_key": [ "common_log_id", "common_recv_time", "common_data_center" ], "functions": { "$ref":"public_schema_info.json#/functions" }, "schema_query": { "dimensions": [ "radius_nas_ip", "radius_framed_ip", "common_subscriber_id" ], "metrics": [ "radius_framed_ip", "radius_event_timestamp", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num" ], "filters": [ "radius_framed_ip", "common_subscriber_id", "radius_packet_type", "radius_acct_session_id", "radius_acct_multi_session_id", "radius_acct_status_type" ], "references": { "$ref":"public_schema_info.json#/schema_query/references" }, "details": { "general": [ "common_recv_time", "common_log_id", "common_stream_trace_id", "common_address_type", "common_schema_type", "common_direction", "common_stream_dir", "common_start_time", "common_end_time", "common_con_duration_ms", "common_establish_latency_ms", "common_processing_time", "common_ingestion_time", "common_entrance_id", "common_device_id", "common_egress_link_id", "common_ingress_link_id", "common_isp", "common_data_center", "common_device_group", "common_sled_ip" ], "source": [ "common_client_ip", "common_internal_ip", "common_client_port", "common_client_location", "common_client_asn", "common_subscriber_id", "common_imei", "common_imsi", "common_phone_number" ], "destination": [ "common_server_ip", "common_external_ip", "common_server_port", "common_server_location", "common_server_asn" ], "application": [ "common_app_id", "common_userdefine_app_name", "common_app_identify_info", "common_app_label", "common_app_surrogate_id", "common_l7_protocol", "common_protocol_label", "common_service_category", "common_service", "common_l4_protocol", "common_app_behavior" ], "transmission": [ "common_sessions", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_c2s_ipfrag_num", "common_s2c_ipfrag_num", "common_c2s_tcp_lostlen", "common_s2c_tcp_lostlen", "common_c2s_tcp_unorder_num", "common_s2c_tcp_unorder_num", "common_c2s_pkt_retrans", "common_s2c_pkt_retrans", "common_c2s_byte_retrans", "common_s2c_byte_retrans", "common_first_ttl", "common_tcp_client_isn", "common_tcp_server_isn", "common_mirrored_pkts", "common_mirrored_bytes" ], "other": [ "common_device_tag", "common_encapsulation", "common_tunnels", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_link_info_c2s", "common_link_info_s2c", "common_packet_capture_file", "common_action", "common_sub_action", "common_policy_id", "common_user_tags", "common_user_region" ] } }, "schema_type": { "RADIUS": { "$ref":"public_schema_info.json#/schema_type/RADIUS" } }, "default_columns": [ "common_recv_time", "common_log_id", "common_subscriber_id", "radius_nas_ip", "radius_framed_ip", "radius_acct_status_type" ], "internal_columns": [ "common_recv_time", "common_log_id", "common_processing_time", "common_ingestion_time", "common_packet_capture_file" ], "tunnel_type": { "$ref":"public_schema_info.json#/tunnel_type" } }, "fields": [ { "name":"common_recv_time", "label":"Receive Time", "doc": { "constraints": { "type":"timestamp" }, "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_log_id", "label":"Log ID", "doc": { "format": { "functions":"snowflake_id" }, "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_policy_id", "label":"Policy ID", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_subscriber_id", "label":"Subscriber ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_imei", "label":"IMEI", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_imsi", "label":"IMSI", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_phone_number", "label":"Phone Number", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_client_ip", "label":"Client IP", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_client_port", "label":"Client Port", "doc": { "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_internal_ip", "label":"Internal IP", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_l4_protocol", "label":"L4 Protocol", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_address_type", "label":"Address Type", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"4", "value":"ipv4" }, { "code":"6", "value":"ipv6" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"common_server_ip", "label":"Server IP", "doc": { "constraints": { "type":"ip" }, "format": { "functions":"geo_asn", "appendTo":"common_server_asn" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_server_port", "label":"Server Port", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"common_external_ip", "label":"External IP", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_action", "label":"Action", "doc": { "visibility":"hidden", "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"0", "value":"None" }, { "code":"1", "value":"Monitor" }, { "code":"2", "value":"Intercept" }, { "code":"16", "value":"Deny" }, { "code":"48", "value":"Manipulation" }, { "code":"128", "value":"Allow" } ], "ttl":null }, "type":"int" }, { "name":"common_direction", "label":"Direction", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"69", "value":"outbound" }, { "code":"73", "value":"inbound" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"common_entrance_id", "label":"Entrance ID", "doc": { "visibility":"disabled", "ttl":null }, "type":"int" }, { "name":"common_sled_ip", "label":"Sled IP", "doc": { "constraints": { "type":"ip" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_client_location", "label":"Client Location", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_client_asn", "label":"Client ASN", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_server_location", "label":"Server Location", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_server_asn", "label":"Server ASN", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_sessions", "label":"Sessions", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_c2s_pkt_num", "label":"Packets Sent", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_s2c_pkt_num", "label":"Packets Received", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_c2s_byte_num", "label":"Bytes Sent", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_s2c_byte_num", "label":"Bytes Received", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_c2s_pkt_diff", "label":"Packets Sent (Delta)", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_s2c_pkt_diff", "label":"Packets Received (Delta)", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_c2s_byte_diff", "label":"Bytes Sent (Delta)", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_s2c_byte_diff", "label":"Bytes Received (Delta)", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_service", "label":"Service", "doc": { "visibility":"disabled", "ttl":null }, "type":"int" }, { "name":"common_schema_type", "label":"Schema Type", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"BASE", "value":"BASE" }, { "code":"HTTP", "value":"HTTP" }, { "code":"MAIL", "value":"MAIL" }, { "code":"DNS", "value":"DNS" }, { "code":"SSL", "value":"SSL" }, { "code":"FTP", "value":"FTP" } ], "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_user_tags", "label":"User Tags", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_sub_action", "label":"Sub Action", "doc": { "data": [ { "code":"allow", "value":"Allow" }, { "code":"deny", "value":"Deny" }, { "code":"monitor", "value":"Monitor" }, { "code":"replace", "value":"Replace" }, { "code":"redirect", "value":"Redirect" }, { "code":"insert", "value":"Insert" }, { "code":"hijack", "value":"Hijack" } ], "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_user_region", "label":"User Region", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_device_id", "label":"Device ID", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_egress_link_id", "label":"Egress Link ID", "doc": { "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_ingress_link_id", "label":"Ingress Link ID", "doc": { "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_isp", "label":"ISP", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_device_tag", "label":"Device Tag", "doc": { "visibility":"hidden", "format": { "functions":"flattenSpec,flattenSpec", "appendTo":"common_data_center,common_device_group", "param":"$.tags[?(@.tag=='data_center')].value,$.tags[?(@.tag=='device_group')].value" }, "ttl":null }, "type":"string" }, { "name":"common_data_center", "label":"Data Center", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": { "$ref":"device_tag.json#", "key":"$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagValue']", "value":"$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagName']" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_device_group", "label":"Device Group", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": { "$ref":"device_tag.json#", "key":"$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagValue']", "value":"$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagName']" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"common_app_behavior", "label":"Application Behavior", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_encapsulation", "label":"Encapsulation", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": { "$ref":"public_schema_info.json#/fields/common_encapsulation/data" }, "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_app_label", "label":"Application Label", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_tunnels", "label":"Tunnels", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_protocol_label", "label":"Protocol Label", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_app_id", "label":"Application ID", "type":"string", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"common_userdefine_app_name", "label":"User Define App Name", "type":"string", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"common_app_identify_info", "label":"App Identity Info", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_app_surrogate_id", "label":"Surrogate ID", "type":"string", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"common_l7_protocol", "label":"L7 Protocol", "type":"string", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"common_service_category", "label":"FQDN Category", "doc": { "constraints": { "operator_functions":"has" }, "visibility":"disabled", "dict_location": { "path":"/v1/category/dict", "key":"categoryId", "value":"categoryName" }, "ttl":null }, "type": { "type":"array", "items":"int" } }, { "name":"common_start_time", "label":"Start Time", "doc": { "constraints": { "type":"timestamp" }, "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_end_time", "label":"End Time", "doc": { "constraints": { "type":"timestamp" }, "format": { "functions":"get_value", "appendTo":"common_recv_time" }, "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_establish_latency_ms", "label":"TCP Handshake Latency (ms)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_con_duration_ms", "label":"Duration (ms)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_stream_dir", "label":"Stream Direction", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"1", "value":"c2s" }, { "code":"2", "value":"s2c" }, { "code":"3", "value":"double" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"common_address_list", "label":"Address List", "doc": { "visibility":"disabled", "ttl":null }, "type":"string" }, { "name":"common_has_dup_traffic", "label":"Duplication Traffic", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": { "$ref":"public_schema_info.json#/fields/common_has_dup_traffic/data" }, "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_stream_error", "label":"Stream Error", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_stream_trace_id", "label":"Session ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_link_info_c2s", "label":"Link Info (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_link_info_s2c", "label":"Link Info (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"string" }, { "name":"common_packet_capture_file", "label":"Packet Capture File", "doc": { "visibility":"hidden", "constraints": { "type":"file" }, "ttl":null }, "type":"string" }, { "name":"common_c2s_ipfrag_num", "label":"Fragmentation Packets (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_s2c_ipfrag_num", "label":"Fragmentation Packets (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_c2s_tcp_lostlen", "label":"Sequence Gap Loss (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_s2c_tcp_lostlen", "label":"Sequence Gap Loss (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_c2s_tcp_unorder_num", "label":"Unordered Packets (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_s2c_tcp_unorder_num", "label":"Unordered Packets (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_c2s_pkt_retrans", "label":"Packet Retransmission (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_s2c_pkt_retrans", "label":"Packet Retransmission (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_c2s_byte_retrans", "label":"Byte Retransmission (c2s)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_s2c_byte_retrans", "label":"Byte Retransmission (s2c)", "doc": { "visibility":"hidden", "ttl":null }, "type":"long" }, { "name":"common_tcp_client_isn", "label":"TCP Client ISN", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_tcp_server_isn", "label":"TCP Server ISN", "doc": { "visibility":"disabled", "ttl":null }, "type":"long" }, { "name":"common_first_ttl", "label":"First TTL", "doc": { "visibility":"hidden", "ttl":null }, "type":"int" }, { "name":"common_processing_time", "label":"Processing Time", "doc": { "constraints": { "type":"timestamp" }, "format": { "functions":"current_timestamp" }, "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_ingestion_time", "label":"Ingestion Time", "doc": { "constraints": { "type":"timestamp" }, "format": { "functions":"ingestion_time" }, "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"common_mirrored_pkts", "label":"Mirrored Packets", "type":"long", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"common_mirrored_bytes", "label":"Mirrored Bytes", "type":"long", "doc": { "visibility":"hidden", "ttl":null } }, { "name":"radius_packet_type", "label":"Packet Type", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"1", "value":"Access-Request" }, { "code":"2", "value":"Access-Accept" }, { "code":"3", "value":"Access-Reject" }, { "code":"4", "value":"Accounting-Request" }, { "code":"5", "value":"Accounting-Response" }, { "code":"11", "value":"Access-Challenge" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_account", "label":"Account", "doc": { "format": { "functions":"get_value", "appendTo":"common_subscriber_id" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_nas_ip", "label":"Nas IP", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_framed_ip", "label":"Framed IP", "doc": { "constraints": { "type":"ip" }, "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_session_timeout", "label":"Session Timeout", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_idle_timeout", "label":"Idle Timeout", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_status_type", "label":"ACC Status Type", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"1", "value":"Start" }, { "code":"2", "value":"Stop" }, { "code":"3", "value":"Interim-Update" }, { "code":"7", "value":"Accounting-On" }, { "code":"8", "value":"Accounting-Off" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_terminate_cause", "label":"Acct Terminate Cause", "doc": { "constraints": { "operator_functions":"=,!=" }, "data": [ { "code":"1", "value":"User Request" }, { "code":"2", "value":"Lost Carrier" }, { "code":"3", "value":"Lost Service" }, { "code":"4", "value":"Idle Timeout" }, { "code":"5", "value":"Session Timeout" }, { "code":"6", "value":"Admin Reset" }, { "code":"7", "value":"Admin Reboot" }, { "code":"8", "value":"Port Error" }, { "code":"9", "value":"NAS Error" }, { "code":"10", "value":"NAS Request" }, { "code":"11", "value":"NAS Reboot" }, { "code":"12", "value":"Port Unneeded" }, { "code":"13", "value":"Port Preempted" }, { "code":"14", "value":"Port Suspended" }, { "code":"15", "value":"Service Unavailable" }, { "code":"16", "value":"Callback" }, { "code":"17", "value":"User Error" }, { "code":"18", "value":"Host Request" } ], "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_event_timestamp", "label":"Event Timestamp", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_service_type", "label":"Service Type", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_nas_port", "label":"Nas Port", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_framed_protocol", "label":"Framed Protocol", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_callback_number", "label":"Callback Number", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_callback_id", "label":"Callback ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_termination_action", "label":"Termination Action", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_called_station_id", "label":"Called Station ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_calling_station_id", "label":"Calling Station ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_acct_delay_time", "label":"Acct Delay Time", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_session_id", "label":"Acct Session ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_acct_multi_session_id", "label":"Acct Multi Session ID", "doc": { "visibility":"enabled", "ttl":null }, "type":"string" }, { "name":"radius_acct_input_octets", "label":"Acct Input Octets", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"radius_acct_output_octets", "label":"Acct Output Octets", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"radius_acct_input_packets", "label":"Acct Input Packets", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"radius_acct_output_packets", "label":"Acct Output Packets", "doc": { "visibility":"enabled", "ttl":null }, "type":"long" }, { "name":"radius_acct_session_time", "label":"Acct Session Time", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_link_count", "label":"Acct Link Count", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_interim_interval", "label":"Acct Interim Interval", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" }, { "name":"radius_acct_authentic", "label":"Acct Authentic", "doc": { "visibility":"enabled", "ttl":null }, "type":"int" } ] }