Field Name | Definition |
appsite | Friendly name for a Website or Application |
authtype | |
blocked | This occurs because the user is not authorized to access the site, that is, his access has been “blocked.” However, it can also be caused by technical anomalies, for example, “page not found by server.” |
bytes | Number of total bytes (transmit and receive) for the session. |
category | Describes the content of a Web page that was visited. |
classification | User defined classification for the website content that was visited. Values could be any of the following: Acceptable, Unacceptable and Neutral |
clientin | |
clientout | |
contenttype | Refers to an HTTP header field that specifies the type of data contained in the body of an HTTP request or response. Values could be any of the following: jpeg, mpeg, pdf, html, css, etc. |
datetime | Date time stamp associated with each recrod hit |
domain | A fully qualified domain name (FQDN) is a complete and unambiguous domain name that specifies the exact location of a specific resource on the internet. |
group | Organizational groups are structured in a hierarchical manner, forming a tree-like structure. |
hit | Number of records (represents a record count) |
identity | |
ip | Source IP Address |
network | |
outboundip | Destination IP Address |
proxyport | |
refererdomain | HTTP header field that indicates the URL or domain from which a user navigated to the current page. |
resultcode | HTTP status codes that are used to indicate the result or status of an HTTP request made to a web server. Some commonly encountered codes are: 200 OK, 404 Not Found, etc. |
searchterms | Search query or keyword, refers to the specific words or phrases that a user enters into a search engine to find information on a particular topic. |
serverin | |
serverout | |
source | |
timeonline | An approximation of the time that a user spends on the Internet. Wavecrest’s Smart Engine algorithms can produce the most accurate time online measurement. |
user | Field refers to the information recorded about the user associated with a specific network connection or traffic event. |
useragent | HTTP header field sent by a web browser or other client software when making a request to a web server. It identifies the client’s software, version, and other relevant information to help the server understand the capabilities and requirements of the client. |
visit | A click action for the purpose of visiting a Web site. One click equals one request for a Web page. |
Tag: fields
If you want all Web traffic detail, enable SSL inspection on your firewall to create raw logs containing full URLs, content type, user agent, and more. Then when your logs are imported into or transferred via syslog to Cyfin, you can take full advantage of Cyfin’s high precision algorithms that increase report accuracy and detail.