Network Event Properties
The following event properties can be used with network events in uAQL queries (event type
Net.*). In addition to the properties listed here, the common properties are applicable, too.
| Property name | uAQL Data Type | Description | Platform |
|---|---|---|---|
Net.Target.Ip |
String | The network target's IP address (IPv4 or IPv6) | Win, macOS |
Net.Target.IpIsV6 |
Boolean | Indicates whether the network target's IP address is IPv6 (true) or not (false). | Win, macOS |
Net.Target.Name |
String | The network target's name. This is only available if it can be resolved from the local DNS cache. | Win, macOS |
Net.Target.Port |
Integer | The network target's port | Win, macOS |
Net.Target.PortName |
String | A textual representation of the network target port, e.g: https | Win, macOS |
Net.Target.Protocol |
String | Either TCP or UDP | Win, macOS |
Net.Source.Ip |
String | The network source IP address (IPv4 or IPv6) | Win, macOS |
Net.Source.IpIsV6 |
Boolean | Indicates whether the network source IP address is IPv6 (true) or not (false). | Win, macOS |
Net.Source.Name |
String | The network source name. This is only available if it can be resolved from the local DNS cache. | Win, macOS |
Net.Source.Port |
Integer | The network source port | Win, macOS |
Net.Source.PortName |
String | A textual representation of the network source port, e.g: https | Win, macOS |