1725 lines
44 KiB
JSON
1725 lines
44 KiB
JSON
{
|
|
"type":"record",
|
|
"name":"radius_record",
|
|
"namespace":"tsg_galaxy_v3",
|
|
"doc":
|
|
{
|
|
"primary_key":"common_log_id",
|
|
"partition_key":"common_recv_time",
|
|
"ttl":null,
|
|
"default_ttl":2592000,
|
|
"index_key":
|
|
[
|
|
"common_log_id",
|
|
"common_recv_time",
|
|
"common_data_center"
|
|
],
|
|
"functions":
|
|
{
|
|
"$ref":"public_schema_info.json#/functions"
|
|
},
|
|
"schema_query":
|
|
{
|
|
"dimensions":
|
|
[
|
|
"radius_nas_ip",
|
|
"radius_framed_ip",
|
|
"common_subscriber_id"
|
|
],
|
|
"metrics":
|
|
[
|
|
"radius_framed_ip",
|
|
"radius_event_timestamp",
|
|
"common_c2s_pkt_num",
|
|
"common_s2c_pkt_num",
|
|
"common_c2s_byte_num",
|
|
"common_s2c_byte_num"
|
|
],
|
|
"filters":
|
|
[
|
|
"radius_framed_ip",
|
|
"common_subscriber_id",
|
|
"radius_packet_type",
|
|
"radius_acct_session_id",
|
|
"radius_acct_multi_session_id",
|
|
"radius_acct_status_type"
|
|
],
|
|
"references":
|
|
{
|
|
"$ref":"public_schema_info.json#/schema_query/references"
|
|
},
|
|
"details":
|
|
{
|
|
"general":
|
|
[
|
|
"common_recv_time",
|
|
"common_log_id",
|
|
"common_stream_trace_id",
|
|
"common_address_type",
|
|
"common_schema_type",
|
|
"common_direction",
|
|
"common_stream_dir",
|
|
"common_start_time",
|
|
"common_end_time",
|
|
"common_con_duration_ms",
|
|
"common_establish_latency_ms",
|
|
"common_processing_time",
|
|
"common_ingestion_time",
|
|
"common_entrance_id",
|
|
"common_device_id",
|
|
"common_egress_link_id",
|
|
"common_ingress_link_id",
|
|
"common_isp",
|
|
"common_data_center",
|
|
"common_device_group",
|
|
"common_sled_ip"
|
|
],
|
|
"source":
|
|
[
|
|
"common_client_ip",
|
|
"common_internal_ip",
|
|
"common_client_port",
|
|
"common_client_location",
|
|
"common_client_asn",
|
|
"common_subscriber_id",
|
|
"common_imei",
|
|
"common_imsi",
|
|
"common_phone_number"
|
|
],
|
|
"destination":
|
|
[
|
|
"common_server_ip",
|
|
"common_external_ip",
|
|
"common_server_port",
|
|
"common_server_location",
|
|
"common_server_asn"
|
|
],
|
|
"application":
|
|
[
|
|
"common_app_id",
|
|
"common_userdefine_app_name",
|
|
"common_app_identify_info",
|
|
"common_app_label",
|
|
"common_app_surrogate_id",
|
|
"common_l7_protocol",
|
|
"common_protocol_label",
|
|
"common_service_category",
|
|
"common_service",
|
|
"common_l4_protocol",
|
|
"common_app_behavior"
|
|
],
|
|
"transmission":
|
|
[
|
|
"common_sessions",
|
|
"common_c2s_pkt_num",
|
|
"common_s2c_pkt_num",
|
|
"common_c2s_byte_num",
|
|
"common_s2c_byte_num",
|
|
"common_c2s_ipfrag_num",
|
|
"common_s2c_ipfrag_num",
|
|
"common_c2s_tcp_lostlen",
|
|
"common_s2c_tcp_lostlen",
|
|
"common_c2s_tcp_unorder_num",
|
|
"common_s2c_tcp_unorder_num",
|
|
"common_c2s_pkt_retrans",
|
|
"common_s2c_pkt_retrans",
|
|
"common_c2s_byte_retrans",
|
|
"common_s2c_byte_retrans",
|
|
"common_first_ttl",
|
|
"common_tcp_client_isn",
|
|
"common_tcp_server_isn",
|
|
"common_mirrored_pkts",
|
|
"common_mirrored_bytes"
|
|
],
|
|
"other":
|
|
[
|
|
"common_device_tag",
|
|
"common_encapsulation",
|
|
"common_tunnels",
|
|
"common_address_list",
|
|
"common_has_dup_traffic",
|
|
"common_stream_error",
|
|
"common_link_info_c2s",
|
|
"common_link_info_s2c",
|
|
"common_packet_capture_file",
|
|
"common_action",
|
|
"common_sub_action",
|
|
"common_policy_id",
|
|
"common_user_tags",
|
|
"common_user_region"
|
|
]
|
|
|
|
}
|
|
|
|
},
|
|
"schema_type":
|
|
{
|
|
"RADIUS":
|
|
{
|
|
"$ref":"public_schema_info.json#/schema_type/RADIUS"
|
|
}
|
|
|
|
},
|
|
"default_columns":
|
|
[
|
|
"common_recv_time",
|
|
"common_log_id",
|
|
"common_subscriber_id",
|
|
"radius_nas_ip",
|
|
"radius_framed_ip",
|
|
"radius_acct_status_type"
|
|
],
|
|
"internal_columns":
|
|
[
|
|
"common_recv_time",
|
|
"common_log_id",
|
|
"common_processing_time",
|
|
"common_ingestion_time",
|
|
"common_packet_capture_file"
|
|
],
|
|
"tunnel_type":
|
|
{
|
|
"$ref":"public_schema_info.json#/tunnel_type"
|
|
}
|
|
|
|
},
|
|
"fields":
|
|
[
|
|
{
|
|
"name":"common_recv_time",
|
|
"label":"Receive Time",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"timestamp"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_log_id",
|
|
"label":"Log ID",
|
|
"doc":
|
|
{
|
|
"format":
|
|
{
|
|
"functions":"snowflake_id"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_policy_id",
|
|
"label":"Policy ID",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_subscriber_id",
|
|
"label":"Subscriber ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_imei",
|
|
"label":"IMEI",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_imsi",
|
|
"label":"IMSI",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_phone_number",
|
|
"label":"Phone Number",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_client_ip",
|
|
"label":"Client IP",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_client_port",
|
|
"label":"Client Port",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_internal_ip",
|
|
"label":"Internal IP",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_l4_protocol",
|
|
"label":"L4 Protocol",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_address_type",
|
|
"label":"Address Type",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"4",
|
|
"value":"ipv4"
|
|
},
|
|
{
|
|
"code":"6",
|
|
"value":"ipv6"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_server_ip",
|
|
"label":"Server IP",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"ip"
|
|
},
|
|
"format":
|
|
{
|
|
"functions":"geo_asn",
|
|
"appendTo":"common_server_asn"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_server_port",
|
|
"label":"Server Port",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_external_ip",
|
|
"label":"External IP",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_action",
|
|
"label":"Action",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"0",
|
|
"value":"None"
|
|
},
|
|
{
|
|
"code":"1",
|
|
"value":"Monitor"
|
|
},
|
|
{
|
|
"code":"2",
|
|
"value":"Intercept"
|
|
},
|
|
{
|
|
"code":"16",
|
|
"value":"Deny"
|
|
},
|
|
{
|
|
"code":"48",
|
|
"value":"Manipulation"
|
|
},
|
|
{
|
|
"code":"128",
|
|
"value":"Allow"
|
|
}
|
|
|
|
],
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_direction",
|
|
"label":"Direction",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"69",
|
|
"value":"outbound"
|
|
},
|
|
{
|
|
"code":"73",
|
|
"value":"inbound"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_entrance_id",
|
|
"label":"Entrance ID",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_sled_ip",
|
|
"label":"Sled IP",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"ip"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_client_location",
|
|
"label":"Client Location",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_client_asn",
|
|
"label":"Client ASN",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_server_location",
|
|
"label":"Server Location",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_server_asn",
|
|
"label":"Server ASN",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_sessions",
|
|
"label":"Sessions",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_pkt_num",
|
|
"label":"Packets Sent",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_pkt_num",
|
|
"label":"Packets Received",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_byte_num",
|
|
"label":"Bytes Sent",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_byte_num",
|
|
"label":"Bytes Received",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_pkt_diff",
|
|
"label":"Packets Sent (Delta)",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_pkt_diff",
|
|
"label":"Packets Received (Delta)",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_byte_diff",
|
|
"label":"Bytes Sent (Delta)",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_byte_diff",
|
|
"label":"Bytes Received (Delta)",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_service",
|
|
"label":"Service",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_schema_type",
|
|
"label":"Schema Type",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"BASE",
|
|
"value":"BASE"
|
|
},
|
|
{
|
|
"code":"HTTP",
|
|
"value":"HTTP"
|
|
},
|
|
{
|
|
"code":"MAIL",
|
|
"value":"MAIL"
|
|
},
|
|
{
|
|
"code":"DNS",
|
|
"value":"DNS"
|
|
},
|
|
{
|
|
"code":"SSL",
|
|
"value":"SSL"
|
|
},
|
|
{
|
|
"code":"FTP",
|
|
"value":"FTP"
|
|
}
|
|
|
|
],
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_user_tags",
|
|
"label":"User Tags",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_sub_action",
|
|
"label":"Sub Action",
|
|
"doc":
|
|
{
|
|
"data":
|
|
[
|
|
{
|
|
"code":"allow",
|
|
"value":"Allow"
|
|
},
|
|
{
|
|
"code":"deny",
|
|
"value":"Deny"
|
|
},
|
|
{
|
|
"code":"monitor",
|
|
"value":"Monitor"
|
|
},
|
|
{
|
|
"code":"replace",
|
|
"value":"Replace"
|
|
},
|
|
{
|
|
"code":"redirect",
|
|
"value":"Redirect"
|
|
},
|
|
{
|
|
"code":"insert",
|
|
"value":"Insert"
|
|
},
|
|
{
|
|
"code":"hijack",
|
|
"value":"Hijack"
|
|
}
|
|
|
|
],
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_user_region",
|
|
"label":"User Region",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_device_id",
|
|
"label":"Device ID",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_egress_link_id",
|
|
"label":"Egress Link ID",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_ingress_link_id",
|
|
"label":"Ingress Link ID",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_isp",
|
|
"label":"ISP",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_device_tag",
|
|
"label":"Device Tag",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"format":
|
|
{
|
|
"functions":"flattenSpec,flattenSpec",
|
|
"appendTo":"common_data_center,common_device_group",
|
|
"param":"$.tags[?(@.tag=='data_center')].value,$.tags[?(@.tag=='device_group')].value"
|
|
},
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_data_center",
|
|
"label":"Data Center",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
{
|
|
"$ref":"device_tag.json#",
|
|
"key":"$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagValue']",
|
|
"value":"$[?(@.tagType=='data_center')].subTags.[?(@.tagType=='data_center')]['tagName']"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_device_group",
|
|
"label":"Device Group",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
{
|
|
"$ref":"device_tag.json#",
|
|
"key":"$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagValue']",
|
|
"value":"$[?(@.tagType=='device_group')].subTags.[?(@.tagType=='device_group')]['tagName']"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_app_behavior",
|
|
"label":"Application Behavior",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_encapsulation",
|
|
"label":"Encapsulation",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
{
|
|
"$ref":"public_schema_info.json#/fields/common_encapsulation/data"
|
|
},
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_app_label",
|
|
"label":"Application Label",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_tunnels",
|
|
"label":"Tunnels",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_protocol_label",
|
|
"label":"Protocol Label",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_app_id",
|
|
"label":"Application ID",
|
|
"type":"string",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_userdefine_app_name",
|
|
"label":"User Define App Name",
|
|
"type":"string",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_app_identify_info",
|
|
"label":"App Identity Info",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_app_surrogate_id",
|
|
"label":"Surrogate ID",
|
|
"type":"string",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_l7_protocol",
|
|
"label":"L7 Protocol",
|
|
"type":"string",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_service_category",
|
|
"label":"FQDN Category",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"has"
|
|
},
|
|
"visibility":"disabled",
|
|
"dict_location":
|
|
{
|
|
"path":"/v1/category/dict",
|
|
"key":"categoryId",
|
|
"value":"categoryName"
|
|
},
|
|
"ttl":null
|
|
},
|
|
"type":
|
|
{
|
|
"type":"array",
|
|
"items":"int"
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_start_time",
|
|
"label":"Start Time",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"timestamp"
|
|
},
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_end_time",
|
|
"label":"End Time",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"timestamp"
|
|
},
|
|
"format":
|
|
{
|
|
"functions":"get_value",
|
|
"appendTo":"common_recv_time"
|
|
},
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_establish_latency_ms",
|
|
"label":"TCP Handshake Latency (ms)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_con_duration_ms",
|
|
"label":"Duration (ms)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_stream_dir",
|
|
"label":"Stream Direction",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"1",
|
|
"value":"c2s"
|
|
},
|
|
{
|
|
"code":"2",
|
|
"value":"s2c"
|
|
},
|
|
{
|
|
"code":"3",
|
|
"value":"double"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_address_list",
|
|
"label":"Address List",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_has_dup_traffic",
|
|
"label":"Duplication Traffic",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
{
|
|
"$ref":"public_schema_info.json#/fields/common_has_dup_traffic/data"
|
|
},
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_stream_error",
|
|
"label":"Stream Error",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_stream_trace_id",
|
|
"label":"Session ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_link_info_c2s",
|
|
"label":"Link Info (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_link_info_s2c",
|
|
"label":"Link Info (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_packet_capture_file",
|
|
"label":"Packet Capture File",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"constraints":
|
|
{
|
|
"type":"file"
|
|
},
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"common_c2s_ipfrag_num",
|
|
"label":"Fragmentation Packets (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_ipfrag_num",
|
|
"label":"Fragmentation Packets (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_tcp_lostlen",
|
|
"label":"Sequence Gap Loss (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_tcp_lostlen",
|
|
"label":"Sequence Gap Loss (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_tcp_unorder_num",
|
|
"label":"Unordered Packets (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_tcp_unorder_num",
|
|
"label":"Unordered Packets (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_pkt_retrans",
|
|
"label":"Packet Retransmission (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_pkt_retrans",
|
|
"label":"Packet Retransmission (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_c2s_byte_retrans",
|
|
"label":"Byte Retransmission (c2s)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_s2c_byte_retrans",
|
|
"label":"Byte Retransmission (s2c)",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_tcp_client_isn",
|
|
"label":"TCP Client ISN",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_tcp_server_isn",
|
|
"label":"TCP Server ISN",
|
|
"doc":
|
|
{
|
|
"visibility":"disabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_first_ttl",
|
|
"label":"First TTL",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"common_processing_time",
|
|
"label":"Processing Time",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"timestamp"
|
|
},
|
|
"format":
|
|
{
|
|
"functions":"current_timestamp"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_ingestion_time",
|
|
"label":"Ingestion Time",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"timestamp"
|
|
},
|
|
"format":
|
|
{
|
|
"functions":"ingestion_time"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"common_mirrored_pkts",
|
|
"label":"Mirrored Packets",
|
|
"type":"long",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"common_mirrored_bytes",
|
|
"label":"Mirrored Bytes",
|
|
"type":"long",
|
|
"doc":
|
|
{
|
|
"visibility":"hidden",
|
|
"ttl":null
|
|
}
|
|
|
|
},
|
|
{
|
|
"name":"radius_packet_type",
|
|
"label":"Packet Type",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"1",
|
|
"value":"Access-Request"
|
|
},
|
|
{
|
|
"code":"2",
|
|
"value":"Access-Accept"
|
|
},
|
|
{
|
|
"code":"3",
|
|
"value":"Access-Reject"
|
|
},
|
|
{
|
|
"code":"4",
|
|
"value":"Accounting-Request"
|
|
},
|
|
{
|
|
"code":"5",
|
|
"value":"Accounting-Response"
|
|
},
|
|
{
|
|
"code":"11",
|
|
"value":"Access-Challenge"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_account",
|
|
"label":"Account",
|
|
"doc":
|
|
{
|
|
"format":
|
|
{
|
|
"functions":"get_value",
|
|
"appendTo":"common_subscriber_id"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_nas_ip",
|
|
"label":"Nas IP",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_framed_ip",
|
|
"label":"Framed IP",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"type":"ip"
|
|
},
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_session_timeout",
|
|
"label":"Session Timeout",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_idle_timeout",
|
|
"label":"Idle Timeout",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_status_type",
|
|
"label":"ACC Status Type",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"1",
|
|
"value":"Start"
|
|
},
|
|
{
|
|
"code":"2",
|
|
"value":"Stop"
|
|
},
|
|
{
|
|
"code":"3",
|
|
"value":"Interim-Update"
|
|
},
|
|
{
|
|
"code":"7",
|
|
"value":"Accounting-On"
|
|
},
|
|
{
|
|
"code":"8",
|
|
"value":"Accounting-Off"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_terminate_cause",
|
|
"label":"Acct Terminate Cause",
|
|
"doc":
|
|
{
|
|
"constraints":
|
|
{
|
|
"operator_functions":"=,!="
|
|
},
|
|
"data":
|
|
[
|
|
{
|
|
"code":"1",
|
|
"value":"User Request"
|
|
},
|
|
{
|
|
"code":"2",
|
|
"value":"Lost Carrier"
|
|
},
|
|
{
|
|
"code":"3",
|
|
"value":"Lost Service"
|
|
},
|
|
{
|
|
"code":"4",
|
|
"value":"Idle Timeout"
|
|
},
|
|
{
|
|
"code":"5",
|
|
"value":"Session Timeout"
|
|
},
|
|
{
|
|
"code":"6",
|
|
"value":"Admin Reset"
|
|
},
|
|
{
|
|
"code":"7",
|
|
"value":"Admin Reboot"
|
|
},
|
|
{
|
|
"code":"8",
|
|
"value":"Port Error"
|
|
},
|
|
{
|
|
"code":"9",
|
|
"value":"NAS Error"
|
|
},
|
|
{
|
|
"code":"10",
|
|
"value":"NAS Request"
|
|
},
|
|
{
|
|
"code":"11",
|
|
"value":"NAS Reboot"
|
|
},
|
|
{
|
|
"code":"12",
|
|
"value":"Port Unneeded"
|
|
},
|
|
{
|
|
"code":"13",
|
|
"value":"Port Preempted"
|
|
},
|
|
{
|
|
"code":"14",
|
|
"value":"Port Suspended"
|
|
},
|
|
{
|
|
"code":"15",
|
|
"value":"Service Unavailable"
|
|
},
|
|
{
|
|
"code":"16",
|
|
"value":"Callback"
|
|
},
|
|
{
|
|
"code":"17",
|
|
"value":"User Error"
|
|
},
|
|
{
|
|
"code":"18",
|
|
"value":"Host Request"
|
|
}
|
|
|
|
],
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_event_timestamp",
|
|
"label":"Event Timestamp",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_service_type",
|
|
"label":"Service Type",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_nas_port",
|
|
"label":"Nas Port",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_framed_protocol",
|
|
"label":"Framed Protocol",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_callback_number",
|
|
"label":"Callback Number",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_callback_id",
|
|
"label":"Callback ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_termination_action",
|
|
"label":"Termination Action",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_called_station_id",
|
|
"label":"Called Station ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_calling_station_id",
|
|
"label":"Calling Station ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_acct_delay_time",
|
|
"label":"Acct Delay Time",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_session_id",
|
|
"label":"Acct Session ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_acct_multi_session_id",
|
|
"label":"Acct Multi Session ID",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"string"
|
|
},
|
|
{
|
|
"name":"radius_acct_input_octets",
|
|
"label":"Acct Input Octets",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"radius_acct_output_octets",
|
|
"label":"Acct Output Octets",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"radius_acct_input_packets",
|
|
"label":"Acct Input Packets",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"radius_acct_output_packets",
|
|
"label":"Acct Output Packets",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"long"
|
|
},
|
|
{
|
|
"name":"radius_acct_session_time",
|
|
"label":"Acct Session Time",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_link_count",
|
|
"label":"Acct Link Count",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_interim_interval",
|
|
"label":"Acct Interim Interval",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
},
|
|
{
|
|
"name":"radius_acct_authentic",
|
|
"label":"Acct Authentic",
|
|
"doc":
|
|
{
|
|
"visibility":"enabled",
|
|
"ttl":null
|
|
},
|
|
"type":"int"
|
|
}
|
|
|
|
]
|
|
|
|
} |