NetFlow fields

Fields from NetFlow and IPFIX flows.

netflow

Fields from NetFlow and IPFIX.

netflow.type: The type of NetFlow record described by this event.

type: keyword

exporter

Metadata related to the exporter device that generated this record.

netflow.exporter.address: Exporter’s network address in IP:port format.

type: keyword

netflow.exporter.source_id: Observation domain ID to which this record belongs.

type: long

netflow.exporter.timestamp: Time and date of export.

type: date

netflow.exporter.uptime_millis: How long the exporter process has been running, in milliseconds.

type: long

netflow.exporter.version: NetFlow version used.

type: integer

netflow.absolute_error: type: double
netflow.address_pool_high_threshold: type: long
netflow.address_pool_low_threshold: type: long
netflow.address_port_mapping_high_threshold: type: long
netflow.address_port_mapping_low_threshold: type: long
netflow.address_port_mapping_per_user_high_threshold: type: long
netflow.afc_protocol: type: integer
netflow.afc_protocol_name: type: keyword
netflow.anonymization_flags: type: integer
netflow.anonymization_technique: type: integer
netflow.application_business-relevance: type: long
netflow.application_category_name: type: keyword
netflow.application_description: type: keyword
netflow.application_group_name: type: keyword
netflow.application_http_uri_statistics: type: short
netflow.application_http_user-agent: type: short
netflow.application_id: type: short
netflow.application_name: type: keyword
netflow.application_sub_category_name: type: keyword
netflow.application_traffic-class: type: long
netflow.art_client_network_time_maximum: type: long
netflow.art_client_network_time_minimum: type: long
netflow.art_client_network_time_sum: type: long
netflow.art_clientpackets: type: long
netflow.art_count_late_responses: type: long
netflow.art_count_new_connections: type: long
netflow.art_count_responses: type: long
netflow.art_count_responses_histogram_bucket1: type: long
netflow.art_count_responses_histogram_bucket2: type: long
netflow.art_count_responses_histogram_bucket3: type: long
netflow.art_count_responses_histogram_bucket4: type: long
netflow.art_count_responses_histogram_bucket5: type: long
netflow.art_count_responses_histogram_bucket6: type: long
netflow.art_count_responses_histogram_bucket7: type: long
netflow.art_count_retransmissions: type: long
netflow.art_count_transactions: type: long
netflow.art_network_time_maximum: type: long
netflow.art_network_time_minimum: type: long
netflow.art_network_time_sum: type: long
netflow.art_response_time_maximum: type: long
netflow.art_response_time_minimum: type: long
netflow.art_response_time_sum: type: long
netflow.art_server_network_time_maximum: type: long
netflow.art_server_network_time_minimum: type: long
netflow.art_server_network_time_sum: type: long
netflow.art_server_response_time_maximum: type: long
netflow.art_server_response_time_minimum: type: long
netflow.art_server_response_time_sum: type: long
netflow.art_serverpackets: type: long
netflow.art_total_response_time_maximum: type: long
netflow.art_total_response_time_minimum: type: long
netflow.art_total_response_time_sum: type: long
netflow.art_total_transaction_time_maximum: type: long
netflow.art_total_transaction_time_minimum: type: long
netflow.art_total_transaction_time_sum: type: long
netflow.assembled_fragment_count: type: long
netflow.audit_counter: type: long
netflow.average_interarrival_time: type: long
netflow.bgp_destination_as_number: type: long
netflow.bgp_next_adjacent_as_number: type: long
netflow.bgp_next_hop_ipv4_address: type: ip
netflow.bgp_next_hop_ipv6_address: type: ip
netflow.bgp_prev_adjacent_as_number: type: long
netflow.bgp_source_as_number: type: long
netflow.bgp_validity_state: type: short
netflow.biflow_direction: type: short
netflow.bind_ipv4_address: type: ip
netflow.bind_transport_port: type: integer
netflow.class_id: type: long
netflow.class_name: type: keyword
netflow.classification_engine_id: type: short
netflow.collection_time_milliseconds: type: date
netflow.collector_certificate: type: short
netflow.collector_ipv4_address: type: ip
netflow.collector_ipv6_address: type: ip
netflow.collector_transport_port: type: integer
netflow.common_properties_id: type: long
netflow.confidence_level: type: double
netflow.conn_ipv4_address: type: ip
netflow.conn_transport_port: type: integer
netflow.connection_sum_duration_seconds: type: long
netflow.connection_transaction_id: type: long
netflow.conntrack_id: type: long
netflow.data_byte_count: type: long
netflow.data_link_frame_section: type: short
netflow.data_link_frame_size: type: integer
netflow.data_link_frame_type: type: integer
netflow.data_records_reliability: type: boolean
netflow.delta_flow_count: type: long
netflow.destination_ipv4_address: type: ip
netflow.destination_ipv4_prefix: type: ip
netflow.destination_ipv4_prefix_length: type: short
netflow.destination_ipv6_address: type: ip
netflow.destination_ipv6_prefix: type: ip
netflow.destination_ipv6_prefix_length: type: short
netflow.destination_mac_address: type: keyword
netflow.destination_transport_port: type: integer
netflow.digest_hash_value: type: long
netflow.distinct_count_of_destination_ip_address: type: long
netflow.distinct_count_of_destination_ipv4_address: type: long
netflow.distinct_count_of_destination_ipv6_address: type: long
netflow.distinct_count_of_source_ip_address: type: long
netflow.distinct_count_of_source_ipv4_address: type: long
netflow.distinct_count_of_source_ipv6_address: type: long
netflow.dns_authoritative: type: short
netflow.dns_cname: type: keyword
netflow.dns_id: type: integer
netflow.dns_mx_exchange: type: keyword
netflow.dns_mx_preference: type: integer
netflow.dns_nsd_name: type: keyword
netflow.dns_nx_domain: type: short
netflow.dns_ptrd_name: type: keyword
netflow.dns_qname: type: keyword
netflow.dns_qr_type: type: integer
netflow.dns_query_response: type: short
netflow.dns_rr_section: type: short
netflow.dns_soa_expire: type: long
netflow.dns_soa_minimum: type: long
netflow.dns_soa_refresh: type: long
netflow.dns_soa_retry: type: long
netflow.dns_soa_serial: type: long
netflow.dns_soam_name: type: keyword
netflow.dns_soar_name: type: keyword
netflow.dns_srv_port: type: integer
netflow.dns_srv_priority: type: integer
netflow.dns_srv_target: type: integer
netflow.dns_srv_weight: type: integer
netflow.dns_ttl: type: long
netflow.dns_txt_data: type: keyword
netflow.dot1q_customer_dei: type: boolean
netflow.dot1q_customer_destination_mac_address: type: keyword
netflow.dot1q_customer_priority: type: short
netflow.dot1q_customer_source_mac_address: type: keyword
netflow.dot1q_customer_vlan_id: type: integer
netflow.dot1q_dei: type: boolean
netflow.dot1q_priority: type: short
netflow.dot1q_service_instance_id: type: long
netflow.dot1q_service_instance_priority: type: short
netflow.dot1q_service_instance_tag: type: short
netflow.dot1q_vlan_id: type: integer
netflow.dropped_layer2_octet_delta_count: type: long
netflow.dropped_layer2_octet_total_count: type: long
netflow.dropped_octet_delta_count: type: long
netflow.dropped_octet_total_count: type: long
netflow.dropped_packet_delta_count: type: long
netflow.dropped_packet_total_count: type: long
netflow.dst_traffic_index: type: long
netflow.egress_broadcast_packet_total_count: type: long
netflow.egress_interface: type: long
netflow.egress_interface_type: type: long
netflow.egress_physical_interface: type: long
netflow.egress_unicast_packet_total_count: type: long
netflow.egress_vrfid: type: long
netflow.encrypted_technology: type: keyword
netflow.engine_id: type: short
netflow.engine_type: type: short
netflow.ethernet_header_length: type: short
netflow.ethernet_payload_length: type: integer
netflow.ethernet_total_length: type: integer
netflow.ethernet_type: type: integer
netflow.expired_fragment_count: type: long
netflow.export_interface: type: long
netflow.export_protocol_version: type: short
netflow.export_sctp_stream_id: type: integer
netflow.export_transport_protocol: type: short
netflow.exported_flow_record_total_count: type: long
netflow.exported_message_total_count: type: long
netflow.exported_octet_total_count: type: long
netflow.exporter_certificate: type: short
netflow.exporter_ipv4_address: type: ip
netflow.exporter_ipv6_address: type: ip
netflow.exporter_transport_port: type: integer
netflow.exporting_process_id: type: long
netflow.external_address_realm: type: short
netflow.firewall_event: type: short
netflow.first_eight_non_empty_packet_directions: type: short
netflow.first_non_empty_packet_size: type: integer
netflow.first_packet_banner: type: keyword
netflow.flags_and_sampler_id: type: long
netflow.flow_active_timeout: type: integer
netflow.flow_attributes: type: integer
netflow.flow_direction: type: short
netflow.flow_duration_microseconds: type: long
netflow.flow_duration_milliseconds: type: long
netflow.flow_end_delta_microseconds: type: long
netflow.flow_end_microseconds: type: date
netflow.flow_end_milliseconds: type: date
netflow.flow_end_nanoseconds: type: date
netflow.flow_end_reason: type: short
netflow.flow_end_seconds: type: date
netflow.flow_end_sys_up_time: type: long
netflow.flow_id: type: long
netflow.flow_idle_timeout: type: integer
netflow.flow_key_indicator: type: long
netflow.flow_label_ipv6: type: long
netflow.flow_sampling_time_interval: type: long
netflow.flow_sampling_time_spacing: type: long
netflow.flow_selected_flow_delta_count: type: long
netflow.flow_selected_octet_delta_count: type: long
netflow.flow_selected_packet_delta_count: type: long
netflow.flow_selector_algorithm: type: integer
netflow.flow_start_delta_microseconds: type: long
netflow.flow_start_microseconds: type: date
netflow.flow_start_milliseconds: type: date
netflow.flow_start_nanoseconds: type: date
netflow.flow_start_seconds: type: date
netflow.flow_start_sys_up_time: type: long
netflow.flow_table_flush_event_count: type: long
netflow.flow_table_peak_count: type: long
netflow.forwarding_status: type: short
netflow.fragment_flags: type: short
netflow.fragment_identification: type: long
netflow.fragment_offset: type: integer
netflow.fw_blackout_secs: type: long
netflow.fw_configured_value: type: long
netflow.fw_cts_src_sgt: type: long
netflow.fw_event_level: type: long
netflow.fw_event_level_id: type: long
netflow.fw_ext_event: type: integer
netflow.fw_ext_event_alt: type: long
netflow.fw_ext_event_desc: type: keyword
netflow.fw_half_open_count: type: long
netflow.fw_half_open_high: type: long
netflow.fw_half_open_rate: type: long
netflow.fw_max_sessions: type: long
netflow.fw_rule: type: keyword
netflow.fw_summary_pkt_count: type: long
netflow.fw_zone_pair_id: type: long
netflow.fw_zone_pair_name: type: long
netflow.global_address_mapping_high_threshold: type: long
netflow.gre_key: type: long
netflow.hash_digest_output: type: boolean
netflow.hash_flow_domain: type: integer
netflow.hash_initialiser_value: type: long
netflow.hash_ip_payload_offset: type: long
netflow.hash_ip_payload_size: type: long
netflow.hash_output_range_max: type: long
netflow.hash_output_range_min: type: long
netflow.hash_selected_range_max: type: long
netflow.hash_selected_range_min: type: long
netflow.http_content_type: type: keyword
netflow.http_message_version: type: keyword
netflow.http_reason_phrase: type: keyword
netflow.http_request_host: type: keyword
netflow.http_request_method: type: keyword
netflow.http_request_target: type: keyword
netflow.http_status_code: type: integer
netflow.http_user_agent: type: keyword
netflow.icmp_code_ipv4: type: short
netflow.icmp_code_ipv6: type: short
netflow.icmp_type_code_ipv4: type: integer
netflow.icmp_type_code_ipv6: type: integer
netflow.icmp_type_ipv4: type: short
netflow.icmp_type_ipv6: type: short
netflow.igmp_type: type: short
netflow.ignored_data_record_total_count: type: long
netflow.ignored_layer2_frame_total_count: type: long
netflow.ignored_layer2_octet_total_count: type: long
netflow.ignored_octet_total_count: type: long
netflow.ignored_packet_total_count: type: long
netflow.information_element_data_type: type: short
netflow.information_element_description: type: keyword
netflow.information_element_id: type: integer
netflow.information_element_index: type: integer
netflow.information_element_name: type: keyword
netflow.information_element_range_begin: type: long
netflow.information_element_range_end: type: long
netflow.information_element_semantics: type: short
netflow.information_element_units: type: integer
netflow.ingress_broadcast_packet_total_count: type: long
netflow.ingress_interface: type: long
netflow.ingress_interface_type: type: long
netflow.ingress_multicast_packet_total_count: type: long
netflow.ingress_physical_interface: type: long
netflow.ingress_unicast_packet_total_count: type: long
netflow.ingress_vrfid: type: long
netflow.initial_tcp_flags: type: short
netflow.initiator_octets: type: long
netflow.initiator_packets: type: long
netflow.interface_description: type: keyword
netflow.interface_name: type: keyword
netflow.intermediate_process_id: type: long
netflow.internal_address_realm: type: short
netflow.ip_class_of_service: type: short
netflow.ip_diff_serv_code_point: type: short
netflow.ip_header_length: type: short
netflow.ip_header_packet_section: type: short
netflow.ip_next_hop_ipv4_address: type: ip
netflow.ip_next_hop_ipv6_address: type: ip
netflow.ip_payload_length: type: long
netflow.ip_payload_packet_section: type: short
netflow.ip_precedence: type: short
netflow.ip_sec_spi: type: long
netflow.ip_total_length: type: long
netflow.ip_ttl: type: short
netflow.ip_version: type: short
netflow.ipv4_ihl: type: short
netflow.ipv4_options: type: long
netflow.ipv4_router_sc: type: ip
netflow.ipv6_extension_headers: type: long
netflow.is_multicast: type: short
netflow.ixia_browser_id: type: short
netflow.ixia_browser_name: type: keyword
netflow.ixia_device_id: type: short
netflow.ixia_device_name: type: keyword
netflow.ixia_dns_answer: type: keyword
netflow.ixia_dns_classes: type: keyword
netflow.ixia_dns_query: type: keyword
netflow.ixia_dns_record_txt: type: keyword
netflow.ixia_dst_as_name: type: keyword
netflow.ixia_dst_city_name: type: keyword
netflow.ixia_dst_country_code: type: keyword
netflow.ixia_dst_country_name: type: keyword
netflow.ixia_dst_latitude: type: float
netflow.ixia_dst_longitude: type: float
netflow.ixia_dst_region_code: type: keyword
netflow.ixia_dst_region_node: type: keyword
netflow.ixia_encrypt_cipher: type: keyword
netflow.ixia_encrypt_key_length: type: integer
netflow.ixia_encrypt_type: type: keyword
netflow.ixia_http_host_name: type: keyword
netflow.ixia_http_uri: type: keyword
netflow.ixia_http_user_agent: type: keyword
netflow.ixia_imsi_subscriber: type: keyword
netflow.ixia_l7_app_id: type: long
netflow.ixia_l7_app_name: type: keyword
netflow.ixia_latency: type: long
netflow.ixia_rev_octet_delta_count: type: long
netflow.ixia_rev_packet_delta_count: type: long
netflow.ixia_src_as_name: type: keyword
netflow.ixia_src_city_name: type: keyword
netflow.ixia_src_country_code: type: keyword
netflow.ixia_src_country_name: type: keyword
netflow.ixia_src_latitude: type: float
netflow.ixia_src_longitude: type: float
netflow.ixia_src_region_code: type: keyword
netflow.ixia_src_region_name: type: keyword
netflow.ixia_threat_ipv4: type: ip
netflow.ixia_threat_ipv6: type: ip
netflow.ixia_threat_type: type: keyword
netflow.large_packet_count: type: long
netflow.layer2_frame_delta_count: type: long
netflow.layer2_frame_total_count: type: long
netflow.layer2_octet_delta_count: type: long
netflow.layer2_octet_delta_sum_of_squares: type: long
netflow.layer2_octet_total_count: type: long
netflow.layer2_octet_total_sum_of_squares: type: long
netflow.layer2_segment_id: type: long
netflow.layer2packet_section_data: type: short
netflow.layer2packet_section_offset: type: integer
netflow.layer2packet_section_size: type: integer
netflow.line_card_id: type: long
netflow.log_op: type: short
netflow.lower_ci_limit: type: double
netflow.mark: type: long
netflow.max_bib_entries: type: long
netflow.max_entries_per_user: type: long
netflow.max_export_seconds: type: date
netflow.max_flow_end_microseconds: type: date
netflow.max_flow_end_milliseconds: type: date
netflow.max_flow_end_nanoseconds: type: date
netflow.max_flow_end_seconds: type: date
netflow.max_fragments_pending_reassembly: type: long
netflow.max_packet_size: type: integer
netflow.max_session_entries: type: long
netflow.max_subscribers: type: long
netflow.maximum_ip_total_length: type: long
netflow.maximum_layer2_total_length: type: long
netflow.maximum_ttl: type: short
netflow.mean_flow_rate: type: long
netflow.mean_packet_rate: type: long
netflow.message_md5_checksum: type: short
netflow.message_scope: type: short
netflow.metering_process_id: type: long
netflow.metro_evc_id: type: keyword
netflow.metro_evc_type: type: short
netflow.mib_capture_time_semantics: type: short
netflow.mib_context_engine_id: type: short
netflow.mib_context_name: type: keyword
netflow.mib_index_indicator: type: long
netflow.mib_module_name: type: keyword
netflow.mib_object_description: type: keyword
netflow.mib_object_identifier: type: short
netflow.mib_object_name: type: keyword
netflow.mib_object_syntax: type: keyword
netflow.mib_object_value_bits: type: short
netflow.mib_object_value_counter: type: long
netflow.mib_object_value_gauge: type: long
netflow.mib_object_value_integer: type: integer
netflow.mib_object_value_ip_address: type: ip
netflow.mib_object_value_octet_string: type: short
netflow.mib_object_value_oid: type: short
netflow.mib_object_value_time_ticks: type: long
netflow.mib_object_value_unsigned: type: long
netflow.mib_sub_identifier: type: long
netflow.min_export_seconds: type: date
netflow.min_flow_start_microseconds: type: date
netflow.min_flow_start_milliseconds: type: date
netflow.min_flow_start_nanoseconds: type: date
netflow.min_flow_start_seconds: type: date
netflow.minimum_ip_total_length: type: long
netflow.minimum_layer2_total_length: type: long
netflow.minimum_ttl: type: short
netflow.mobile_imsi: type: keyword
netflow.mobile_msisdn: type: keyword
netflow.monitoring_interval_end_milli_seconds: type: date
netflow.monitoring_interval_start_milli_seconds: type: date
netflow.mpls_label_stack_depth: type: long
netflow.mpls_label_stack_length: type: long
netflow.mpls_label_stack_section: type: short
netflow.mpls_label_stack_section10: type: short
netflow.mpls_label_stack_section2: type: short
netflow.mpls_label_stack_section3: type: short
netflow.mpls_label_stack_section4: type: short
netflow.mpls_label_stack_section5: type: short
netflow.mpls_label_stack_section6: type: short
netflow.mpls_label_stack_section7: type: short
netflow.mpls_label_stack_section8: type: short
netflow.mpls_label_stack_section9: type: short
netflow.mpls_payload_length: type: long
netflow.mpls_payload_packet_section: type: short
netflow.mpls_top_label_exp: type: short
netflow.mpls_top_label_ipv4_address: type: ip
netflow.mpls_top_label_ipv6_address: type: ip
netflow.mpls_top_label_prefix_length: type: short
netflow.mpls_top_label_stack_section: type: short
netflow.mpls_top_label_ttl: type: short
netflow.mpls_top_label_type: type: short
netflow.mpls_vpn_route_distinguisher: type: short
netflow.mptcp_address_id: type: short
netflow.mptcp_flags: type: short
netflow.mptcp_initial_data_sequence_number: type: long
netflow.mptcp_maximum_segment_size: type: integer
netflow.mptcp_receiver_token: type: long
netflow.multicast_replication_factor: type: long
netflow.nat_event: type: short
netflow.nat_inside_svcid: type: integer
netflow.nat_instance_id: type: long
netflow.nat_originating_address_realm: type: short
netflow.nat_outside_svcid: type: integer
netflow.nat_pool_id: type: long
netflow.nat_pool_name: type: keyword
netflow.nat_quota_exceeded_event: type: long
netflow.nat_sub_string: type: keyword
netflow.nat_threshold_event: type: long
netflow.nat_type: type: short
netflow.netscale_ica_client_version: type: keyword
netflow.netscaler_aaa_username: type: keyword
netflow.netscaler_app_name: type: keyword
netflow.netscaler_app_name_app_id: type: long
netflow.netscaler_app_name_incarnation_number: type: long
netflow.netscaler_app_template_name: type: keyword
netflow.netscaler_app_unit_name_app_id: type: long
netflow.netscaler_application_startup_duration: type: long
netflow.netscaler_application_startup_time: type: long
netflow.netscaler_cache_redir_client_connection_core_id: type: long
netflow.netscaler_cache_redir_client_connection_transaction_id: type: long
netflow.netscaler_client_rtt: type: long
netflow.netscaler_connection_chain_hop_count: type: long
netflow.netscaler_connection_chain_id: type: short
netflow.netscaler_connection_id: type: long
netflow.netscaler_current_license_consumed: type: long
netflow.netscaler_db_clt_host_name: type: keyword
netflow.netscaler_db_database_name: type: keyword
netflow.netscaler_db_login_flags: type: long
netflow.netscaler_db_protocol_name: type: short
netflow.netscaler_db_req_string: type: keyword
netflow.netscaler_db_req_type: type: short
netflow.netscaler_db_resp_length: type: long
netflow.netscaler_db_resp_status: type: long
netflow.netscaler_db_resp_status_string: type: keyword
netflow.netscaler_db_user_name: type: keyword
netflow.netscaler_flow_flags: type: long
netflow.netscaler_http_client_interaction_end_time: type: keyword
netflow.netscaler_http_client_interaction_start_time: type: keyword
netflow.netscaler_http_client_render_end_time: type: keyword
netflow.netscaler_http_client_render_start_time: type: keyword
netflow.netscaler_http_content_type: type: keyword
netflow.netscaler_http_domain_name: type: keyword
netflow.netscaler_http_req_authorization: type: keyword
netflow.netscaler_http_req_cookie: type: keyword
netflow.netscaler_http_req_forw_fb: type: long
netflow.netscaler_http_req_forw_lb: type: long
netflow.netscaler_http_req_host: type: keyword
netflow.netscaler_http_req_method: type: keyword
netflow.netscaler_http_req_rcv_fb: type: long
netflow.netscaler_http_req_rcv_lb: type: long
netflow.netscaler_http_req_referer: type: keyword
netflow.netscaler_http_req_url: type: keyword
netflow.netscaler_http_req_user_agent: type: keyword
netflow.netscaler_http_req_via: type: keyword
netflow.netscaler_http_req_xforwarded_for: type: keyword
netflow.netscaler_http_res_forw_fb: type: long
netflow.netscaler_http_res_forw_lb: type: long
netflow.netscaler_http_res_location: type: keyword
netflow.netscaler_http_res_rcv_fb: type: long
netflow.netscaler_http_res_rcv_lb: type: long
netflow.netscaler_http_res_set_cookie: type: keyword
netflow.netscaler_http_res_set_cookie2: type: keyword
netflow.netscaler_http_rsp_len: type: long
netflow.netscaler_http_rsp_status: type: integer
netflow.netscaler_ica_app_module_path: type: keyword
netflow.netscaler_ica_app_process_id: type: long
netflow.netscaler_ica_application_name: type: keyword
netflow.netscaler_ica_application_termination_time: type: long
netflow.netscaler_ica_application_termination_type: type: integer
netflow.netscaler_ica_channel_id1: type: long
netflow.netscaler_ica_channel_id1_bytes: type: long
netflow.netscaler_ica_channel_id2: type: long
netflow.netscaler_ica_channel_id2_bytes: type: long
netflow.netscaler_ica_channel_id3: type: long
netflow.netscaler_ica_channel_id3_bytes: type: long
netflow.netscaler_ica_channel_id4: type: long
netflow.netscaler_ica_channel_id4_bytes: type: long
netflow.netscaler_ica_channel_id5: type: long
netflow.netscaler_ica_channel_id5_bytes: type: long
netflow.netscaler_ica_client_host_name: type: keyword
netflow.netscaler_ica_client_ip: type: ip
netflow.netscaler_ica_client_launcher: type: integer
netflow.netscaler_ica_client_side_rto_count: type: integer
netflow.netscaler_ica_client_side_window_size: type: integer
netflow.netscaler_ica_client_type: type: integer
netflow.netscaler_ica_clientside_delay: type: long
netflow.netscaler_ica_clientside_jitter: type: long
netflow.netscaler_ica_clientside_packets_retransmit: type: integer
netflow.netscaler_ica_clientside_rtt: type: long
netflow.netscaler_ica_clientside_rx_bytes: type: long
netflow.netscaler_ica_clientside_srtt: type: long
netflow.netscaler_ica_clientside_tx_bytes: type: long
netflow.netscaler_ica_connection_priority: type: integer
netflow.netscaler_ica_device_serial_no: type: long
netflow.netscaler_ica_domain_name: type: keyword
netflow.netscaler_ica_flags: type: long
netflow.netscaler_ica_host_delay: type: long
netflow.netscaler_ica_l7_client_latency: type: long
netflow.netscaler_ica_l7_server_latency: type: long
netflow.netscaler_ica_launch_mechanism: type: integer
netflow.netscaler_ica_network_update_end_time: type: long
netflow.netscaler_ica_network_update_start_time: type: long
netflow.netscaler_ica_rtt: type: long
netflow.netscaler_ica_server_name: type: keyword
netflow.netscaler_ica_server_side_rto_count: type: integer
netflow.netscaler_ica_server_side_window_size: type: integer
netflow.netscaler_ica_serverside_delay: type: long
netflow.netscaler_ica_serverside_jitter: type: long
netflow.netscaler_ica_serverside_packets_retransmit: type: integer
netflow.netscaler_ica_serverside_rtt: type: long
netflow.netscaler_ica_serverside_srtt: type: long
netflow.netscaler_ica_session_end_time: type: long
netflow.netscaler_ica_session_guid: type: short
netflow.netscaler_ica_session_reconnects: type: short
netflow.netscaler_ica_session_setup_time: type: long
netflow.netscaler_ica_session_update_begin_sec: type: long
netflow.netscaler_ica_session_update_end_sec: type: long
netflow.netscaler_ica_username: type: keyword
netflow.netscaler_license_type: type: short
netflow.netscaler_main_page_core_id: type: long
netflow.netscaler_main_page_id: type: long
netflow.netscaler_max_license_count: type: long
netflow.netscaler_msi_client_cookie: type: short
netflow.netscaler_round_trip_time: type: long
netflow.netscaler_server_ttfb: type: long
netflow.netscaler_server_ttlb: type: long
netflow.netscaler_syslog_message: type: keyword
netflow.netscaler_syslog_priority: type: short
netflow.netscaler_syslog_timestamp: type: long
netflow.netscaler_transaction_id: type: long
netflow.netscaler_unknown270: type: long
netflow.netscaler_unknown271: type: long
netflow.netscaler_unknown272: type: long
netflow.netscaler_unknown273: type: long
netflow.netscaler_unknown274: type: long
netflow.netscaler_unknown275: type: long
netflow.netscaler_unknown276: type: long
netflow.netscaler_unknown277: type: long
netflow.netscaler_unknown278: type: long
netflow.netscaler_unknown279: type: long
netflow.netscaler_unknown280: type: long
netflow.netscaler_unknown281: type: long
netflow.netscaler_unknown282: type: long
netflow.netscaler_unknown283: type: long
netflow.netscaler_unknown284: type: long
netflow.netscaler_unknown285: type: long
netflow.netscaler_unknown286: type: long
netflow.netscaler_unknown287: type: long
netflow.netscaler_unknown288: type: long
netflow.netscaler_unknown289: type: long
netflow.netscaler_unknown290: type: long
netflow.netscaler_unknown291: type: long
netflow.netscaler_unknown292: type: long
netflow.netscaler_unknown293: type: long
netflow.netscaler_unknown294: type: long
netflow.netscaler_unknown295: type: long
netflow.netscaler_unknown296: type: long
netflow.netscaler_unknown297: type: long
netflow.netscaler_unknown298: type: long
netflow.netscaler_unknown299: type: long
netflow.netscaler_unknown300: type: long
netflow.netscaler_unknown301: type: long
netflow.netscaler_unknown302: type: long
netflow.netscaler_unknown303: type: long
netflow.netscaler_unknown304: type: long
netflow.netscaler_unknown305: type: long
netflow.netscaler_unknown306: type: long
netflow.netscaler_unknown307: type: long
netflow.netscaler_unknown308: type: long
netflow.netscaler_unknown309: type: long
netflow.netscaler_unknown310: type: long
netflow.netscaler_unknown311: type: long
netflow.netscaler_unknown312: type: long
netflow.netscaler_unknown313: type: long
netflow.netscaler_unknown314: type: long
netflow.netscaler_unknown315: type: long
netflow.netscaler_unknown316: type: keyword
netflow.netscaler_unknown317: type: long
netflow.netscaler_unknown318: type: long
netflow.netscaler_unknown319: type: keyword
netflow.netscaler_unknown320: type: integer
netflow.netscaler_unknown321: type: long
netflow.netscaler_unknown322: type: long
netflow.netscaler_unknown323: type: integer
netflow.netscaler_unknown324: type: integer
netflow.netscaler_unknown325: type: integer
netflow.netscaler_unknown326: type: integer
netflow.netscaler_unknown327: type: long
netflow.netscaler_unknown328: type: integer
netflow.netscaler_unknown329: type: integer
netflow.netscaler_unknown330: type: integer
netflow.netscaler_unknown331: type: integer
netflow.netscaler_unknown332: type: long
netflow.netscaler_unknown333: type: keyword
netflow.netscaler_unknown334: type: keyword
netflow.netscaler_unknown335: type: long
netflow.netscaler_unknown336: type: long
netflow.netscaler_unknown337: type: long
netflow.netscaler_unknown338: type: long
netflow.netscaler_unknown339: type: long
netflow.netscaler_unknown340: type: long
netflow.netscaler_unknown341: type: long
netflow.netscaler_unknown342: type: long
netflow.netscaler_unknown343: type: long
netflow.netscaler_unknown344: type: long
netflow.netscaler_unknown345: type: long
netflow.netscaler_unknown346: type: long
netflow.netscaler_unknown347: type: long
netflow.netscaler_unknown348: type: integer
netflow.netscaler_unknown349: type: keyword
netflow.netscaler_unknown350: type: keyword
netflow.netscaler_unknown351: type: keyword
netflow.netscaler_unknown352: type: integer
netflow.netscaler_unknown353: type: long
netflow.netscaler_unknown354: type: long
netflow.netscaler_unknown355: type: long
netflow.netscaler_unknown356: type: long
netflow.netscaler_unknown357: type: long
netflow.netscaler_unknown363: type: short
netflow.netscaler_unknown383: type: short
netflow.netscaler_unknown391: type: long
netflow.netscaler_unknown398: type: long
netflow.netscaler_unknown404: type: long
netflow.netscaler_unknown405: type: long
netflow.netscaler_unknown427: type: long
netflow.netscaler_unknown429: type: short
netflow.netscaler_unknown432: type: short
netflow.netscaler_unknown433: type: short
netflow.netscaler_unknown453: type: long
netflow.netscaler_unknown465: type: long
netflow.new_connection_delta_count: type: long
netflow.next_header_ipv6: type: short
netflow.non_empty_packet_count: type: long
netflow.not_sent_flow_total_count: type: long
netflow.not_sent_layer2_octet_total_count: type: long
netflow.not_sent_octet_total_count: type: long
netflow.not_sent_packet_total_count: type: long
netflow.observation_domain_id: type: long
netflow.observation_domain_name: type: keyword
netflow.observation_point_id: type: long
netflow.observation_point_type: type: short
netflow.observation_time_microseconds: type: date
netflow.observation_time_milliseconds: type: date
netflow.observation_time_nanoseconds: type: date
netflow.observation_time_seconds: type: date
netflow.observed_flow_total_count: type: long
netflow.octet_delta_count: type: long
netflow.octet_delta_sum_of_squares: type: long
netflow.octet_total_count: type: long
netflow.octet_total_sum_of_squares: type: long
netflow.opaque_octets: type: short
netflow.original_exporter_ipv4_address: type: ip
netflow.original_exporter_ipv6_address: type: ip
netflow.original_flows_completed: type: long
netflow.original_flows_initiated: type: long
netflow.original_flows_present: type: long
netflow.original_observation_domain_id: type: long
netflow.os_finger_print: type: keyword
netflow.os_name: type: keyword
netflow.os_version: type: keyword
netflow.p2p_technology: type: keyword
netflow.packet_delta_count: type: long
netflow.packet_total_count: type: long
netflow.padding_octets: type: short
netflow.payload: type: keyword
netflow.payload_entropy: type: short
netflow.payload_length_ipv6: type: integer
netflow.policy_qos_classification_hierarchy: type: long
netflow.policy_qos_queue_index: type: long
netflow.policy_qos_queuedrops: type: long
netflow.policy_qos_queueindex: type: long
netflow.port_id: type: long
netflow.port_range_end: type: integer
netflow.port_range_num_ports: type: integer
netflow.port_range_start: type: integer
netflow.port_range_step_size: type: integer
netflow.post_destination_mac_address: type: keyword
netflow.post_dot1q_customer_vlan_id: type: integer
netflow.post_dot1q_vlan_id: type: integer
netflow.post_ip_class_of_service: type: short
netflow.post_ip_diff_serv_code_point: type: short
netflow.post_ip_precedence: type: short
netflow.post_layer2_octet_delta_count: type: long
netflow.post_layer2_octet_total_count: type: long
netflow.post_mcast_layer2_octet_delta_count: type: long
netflow.post_mcast_layer2_octet_total_count: type: long
netflow.post_mcast_octet_delta_count: type: long
netflow.post_mcast_octet_total_count: type: long
netflow.post_mcast_packet_delta_count: type: long
netflow.post_mcast_packet_total_count: type: long
netflow.post_mpls_top_label_exp: type: short
netflow.post_napt_destination_transport_port: type: integer
netflow.post_napt_source_transport_port: type: integer
netflow.post_nat_destination_ipv4_address: type: ip
netflow.post_nat_destination_ipv6_address: type: ip
netflow.post_nat_source_ipv4_address: type: ip
netflow.post_nat_source_ipv6_address: type: ip
netflow.post_octet_delta_count: type: long
netflow.post_octet_total_count: type: long
netflow.post_packet_delta_count: type: long
netflow.post_packet_total_count: type: long
netflow.post_source_mac_address: type: keyword
netflow.post_vlan_id: type: integer
netflow.private_enterprise_number: type: long
netflow.procera_apn: type: keyword
netflow.procera_base_service: type: keyword
netflow.procera_content_categories: type: keyword
netflow.procera_device_id: type: long
netflow.procera_external_rtt: type: integer
netflow.procera_flow_behavior: type: keyword
netflow.procera_ggsn: type: keyword
netflow.procera_http_content_type: type: keyword
netflow.procera_http_file_length: type: long
netflow.procera_http_language: type: keyword
netflow.procera_http_location: type: keyword
netflow.procera_http_referer: type: keyword
netflow.procera_http_request_method: type: keyword
netflow.procera_http_request_version: type: keyword
netflow.procera_http_response_status: type: integer
netflow.procera_http_url: type: keyword
netflow.procera_http_user_agent: type: keyword
netflow.procera_imsi: type: long
netflow.procera_incoming_octets: type: long
netflow.procera_incoming_packets: type: long
netflow.procera_incoming_shaping_drops: type: long
netflow.procera_incoming_shaping_latency: type: integer
netflow.procera_internal_rtt: type: integer
netflow.procera_local_ipv4_host: type: ip
netflow.procera_local_ipv6_host: type: ip
netflow.procera_msisdn: type: long
netflow.procera_outgoing_octets: type: long
netflow.procera_outgoing_packets: type: long
netflow.procera_outgoing_shaping_drops: type: long
netflow.procera_outgoing_shaping_latency: type: integer
netflow.procera_property: type: keyword
netflow.procera_qoe_incoming_external: type: float
netflow.procera_qoe_incoming_internal: type: float
netflow.procera_qoe_outgoing_external: type: float
netflow.procera_qoe_outgoing_internal: type: float
netflow.procera_rat: type: keyword
netflow.procera_remote_ipv4_host: type: ip
netflow.procera_remote_ipv6_host: type: ip
netflow.procera_rnc: type: integer
netflow.procera_server_hostname: type: keyword
netflow.procera_service: type: keyword
netflow.procera_sgsn: type: keyword
netflow.procera_subscriber_identifier: type: keyword
netflow.procera_template_name: type: keyword
netflow.procera_user_location_information: type: keyword
netflow.protocol_identifier: type: short
netflow.pseudo_wire_control_word: type: long
netflow.pseudo_wire_destination_ipv4_address: type: ip
netflow.pseudo_wire_id: type: long
netflow.pseudo_wire_type: type: integer
netflow.reason: type: long
netflow.reason_text: type: keyword
netflow.relative_error: type: double
netflow.responder_octets: type: long
netflow.responder_packets: type: long
netflow.reverse_absolute_error: type: double
netflow.reverse_anonymization_flags: type: integer
netflow.reverse_anonymization_technique: type: integer
netflow.reverse_application_category_name: type: keyword
netflow.reverse_application_description: type: keyword
netflow.reverse_application_group_name: type: keyword
netflow.reverse_application_id: type: keyword
netflow.reverse_application_name: type: keyword
netflow.reverse_application_sub_category_name: type: keyword
netflow.reverse_average_interarrival_time: type: long
netflow.reverse_bgp_destination_as_number: type: long
netflow.reverse_bgp_next_adjacent_as_number: type: long
netflow.reverse_bgp_next_hop_ipv4_address: type: ip
netflow.reverse_bgp_next_hop_ipv6_address: type: ip
netflow.reverse_bgp_prev_adjacent_as_number: type: long
netflow.reverse_bgp_source_as_number: type: long
netflow.reverse_bgp_validity_state: type: short
netflow.reverse_class_id: type: short
netflow.reverse_class_name: type: keyword
netflow.reverse_classification_engine_id: type: short
netflow.reverse_collection_time_milliseconds: type: long
netflow.reverse_collector_certificate: type: keyword
netflow.reverse_confidence_level: type: double
netflow.reverse_connection_sum_duration_seconds: type: long
netflow.reverse_connection_transaction_id: type: long
netflow.reverse_data_byte_count: type: long
netflow.reverse_data_link_frame_section: type: keyword
netflow.reverse_data_link_frame_size: type: integer
netflow.reverse_data_link_frame_type: type: integer
netflow.reverse_data_records_reliability: type: short
netflow.reverse_delta_flow_count: type: long
netflow.reverse_destination_ipv4_address: type: ip
netflow.reverse_destination_ipv4_prefix: type: ip
netflow.reverse_destination_ipv4_prefix_length: type: short
netflow.reverse_destination_ipv6_address: type: ip
netflow.reverse_destination_ipv6_prefix: type: ip
netflow.reverse_destination_ipv6_prefix_length: type: short
netflow.reverse_destination_mac_address: type: keyword
netflow.reverse_destination_transport_port: type: integer
netflow.reverse_digest_hash_value: type: long
netflow.reverse_distinct_count_of_destination_ip_address: type: long
netflow.reverse_distinct_count_of_destination_ipv4_address: type: long
netflow.reverse_distinct_count_of_destination_ipv6_address: type: long
netflow.reverse_distinct_count_of_source_ip_address: type: long
netflow.reverse_distinct_count_of_source_ipv4_address: type: long
netflow.reverse_distinct_count_of_source_ipv6_address: type: long
netflow.reverse_dot1q_customer_dei: type: short
netflow.reverse_dot1q_customer_destination_mac_address: type: keyword
netflow.reverse_dot1q_customer_priority: type: short
netflow.reverse_dot1q_customer_source_mac_address: type: keyword
netflow.reverse_dot1q_customer_vlan_id: type: integer
netflow.reverse_dot1q_dei: type: short
netflow.reverse_dot1q_priority: type: short
netflow.reverse_dot1q_service_instance_id: type: long
netflow.reverse_dot1q_service_instance_priority: type: short
netflow.reverse_dot1q_service_instance_tag: type: keyword
netflow.reverse_dot1q_vlan_id: type: integer
netflow.reverse_dropped_layer2_octet_delta_count: type: long
netflow.reverse_dropped_layer2_octet_total_count: type: long
netflow.reverse_dropped_octet_delta_count: type: long
netflow.reverse_dropped_octet_total_count: type: long
netflow.reverse_dropped_packet_delta_count: type: long
netflow.reverse_dropped_packet_total_count: type: long
netflow.reverse_dst_traffic_index: type: long
netflow.reverse_egress_broadcast_packet_total_count: type: long
netflow.reverse_egress_interface: type: long
netflow.reverse_egress_interface_type: type: long
netflow.reverse_egress_physical_interface: type: long
netflow.reverse_egress_unicast_packet_total_count: type: long
netflow.reverse_egress_vrfid: type: long
netflow.reverse_encrypted_technology: type: keyword
netflow.reverse_engine_id: type: short
netflow.reverse_engine_type: type: short
netflow.reverse_ethernet_header_length: type: short
netflow.reverse_ethernet_payload_length: type: integer
netflow.reverse_ethernet_total_length: type: integer
netflow.reverse_ethernet_type: type: integer
netflow.reverse_export_sctp_stream_id: type: integer
netflow.reverse_exporter_certificate: type: keyword
netflow.reverse_exporting_process_id: type: long
netflow.reverse_firewall_event: type: short
netflow.reverse_first_non_empty_packet_size: type: integer
netflow.reverse_first_packet_banner: type: keyword
netflow.reverse_flags_and_sampler_id: type: long
netflow.reverse_flow_active_timeout: type: integer
netflow.reverse_flow_attributes: type: integer
netflow.reverse_flow_delta_milliseconds: type: long
netflow.reverse_flow_direction: type: short
netflow.reverse_flow_duration_microseconds: type: long
netflow.reverse_flow_duration_milliseconds: type: long
netflow.reverse_flow_end_delta_microseconds: type: long
netflow.reverse_flow_end_microseconds: type: long
netflow.reverse_flow_end_milliseconds: type: long
netflow.reverse_flow_end_nanoseconds: type: long
netflow.reverse_flow_end_reason: type: short
netflow.reverse_flow_end_seconds: type: long
netflow.reverse_flow_end_sys_up_time: type: long
netflow.reverse_flow_idle_timeout: type: integer
netflow.reverse_flow_label_ipv6: type: long
netflow.reverse_flow_sampling_time_interval: type: long
netflow.reverse_flow_sampling_time_spacing: type: long
netflow.reverse_flow_selected_flow_delta_count: type: long
netflow.reverse_flow_selected_octet_delta_count: type: long
netflow.reverse_flow_selected_packet_delta_count: type: long
netflow.reverse_flow_selector_algorithm: type: integer
netflow.reverse_flow_start_delta_microseconds: type: long
netflow.reverse_flow_start_microseconds: type: long
netflow.reverse_flow_start_milliseconds: type: long
netflow.reverse_flow_start_nanoseconds: type: long
netflow.reverse_flow_start_seconds: type: long
netflow.reverse_flow_start_sys_up_time: type: long
netflow.reverse_forwarding_status: type: long
netflow.reverse_fragment_flags: type: short
netflow.reverse_fragment_identification: type: long
netflow.reverse_fragment_offset: type: integer
netflow.reverse_gre_key: type: long
netflow.reverse_hash_digest_output: type: short
netflow.reverse_hash_flow_domain: type: integer
netflow.reverse_hash_initialiser_value: type: long
netflow.reverse_hash_ip_payload_offset: type: long
netflow.reverse_hash_ip_payload_size: type: long
netflow.reverse_hash_output_range_max: type: long
netflow.reverse_hash_output_range_min: type: long
netflow.reverse_hash_selected_range_max: type: long
netflow.reverse_hash_selected_range_min: type: long
netflow.reverse_icmp_code_ipv4: type: short
netflow.reverse_icmp_code_ipv6: type: short
netflow.reverse_icmp_type_code_ipv4: type: integer
netflow.reverse_icmp_type_code_ipv6: type: integer
netflow.reverse_icmp_type_ipv4: type: short
netflow.reverse_icmp_type_ipv6: type: short
netflow.reverse_igmp_type: type: short
netflow.reverse_ignored_data_record_total_count: type: long
netflow.reverse_ignored_layer2_frame_total_count: type: long
netflow.reverse_ignored_layer2_octet_total_count: type: long
netflow.reverse_information_element_data_type: type: short
netflow.reverse_information_element_description: type: keyword
netflow.reverse_information_element_id: type: integer
netflow.reverse_information_element_index: type: integer
netflow.reverse_information_element_name: type: keyword
netflow.reverse_information_element_range_begin: type: long
netflow.reverse_information_element_range_end: type: long
netflow.reverse_information_element_semantics: type: short
netflow.reverse_information_element_units: type: integer
netflow.reverse_ingress_broadcast_packet_total_count: type: long
netflow.reverse_ingress_interface: type: long
netflow.reverse_ingress_interface_type: type: long
netflow.reverse_ingress_multicast_packet_total_count: type: long
netflow.reverse_ingress_physical_interface: type: long
netflow.reverse_ingress_unicast_packet_total_count: type: long
netflow.reverse_ingress_vrfid: type: long
netflow.reverse_initial_tcp_flags: type: short
netflow.reverse_initiator_octets: type: long
netflow.reverse_initiator_packets: type: long
netflow.reverse_interface_description: type: keyword
netflow.reverse_interface_name: type: keyword
netflow.reverse_intermediate_process_id: type: long
netflow.reverse_ip_class_of_service: type: short
netflow.reverse_ip_diff_serv_code_point: type: short
netflow.reverse_ip_header_length: type: short
netflow.reverse_ip_header_packet_section: type: keyword
netflow.reverse_ip_next_hop_ipv4_address: type: ip
netflow.reverse_ip_next_hop_ipv6_address: type: ip
netflow.reverse_ip_payload_length: type: long
netflow.reverse_ip_payload_packet_section: type: keyword
netflow.reverse_ip_precedence: type: short
netflow.reverse_ip_sec_spi: type: long
netflow.reverse_ip_total_length: type: long
netflow.reverse_ip_ttl: type: short
netflow.reverse_ip_version: type: short
netflow.reverse_ipv4_ihl: type: short
netflow.reverse_ipv4_options: type: long
netflow.reverse_ipv4_router_sc: type: ip
netflow.reverse_ipv6_extension_headers: type: long
netflow.reverse_is_multicast: type: short
netflow.reverse_large_packet_count: type: long
netflow.reverse_layer2_frame_delta_count: type: long
netflow.reverse_layer2_frame_total_count: type: long
netflow.reverse_layer2_octet_delta_count: type: long
netflow.reverse_layer2_octet_delta_sum_of_squares: type: long
netflow.reverse_layer2_octet_total_count: type: long
netflow.reverse_layer2_octet_total_sum_of_squares: type: long
netflow.reverse_layer2_segment_id: type: long
netflow.reverse_layer2packet_section_data: type: keyword
netflow.reverse_layer2packet_section_offset: type: integer
netflow.reverse_layer2packet_section_size: type: integer
netflow.reverse_line_card_id: type: long
netflow.reverse_lower_ci_limit: type: double
netflow.reverse_max_export_seconds: type: long
netflow.reverse_max_flow_end_microseconds: type: long
netflow.reverse_max_flow_end_milliseconds: type: long
netflow.reverse_max_flow_end_nanoseconds: type: long
netflow.reverse_max_flow_end_seconds: type: long
netflow.reverse_max_packet_size: type: integer
netflow.reverse_maximum_ip_total_length: type: long
netflow.reverse_maximum_layer2_total_length: type: long
netflow.reverse_maximum_ttl: type: short
netflow.reverse_message_md5_checksum: type: keyword
netflow.reverse_message_scope: type: short
netflow.reverse_metering_process_id: type: long
netflow.reverse_metro_evc_id: type: keyword
netflow.reverse_metro_evc_type: type: short
netflow.reverse_min_export_seconds: type: long
netflow.reverse_min_flow_start_microseconds: type: long
netflow.reverse_min_flow_start_milliseconds: type: long
netflow.reverse_min_flow_start_nanoseconds: type: long
netflow.reverse_min_flow_start_seconds: type: long
netflow.reverse_minimum_ip_total_length: type: long
netflow.reverse_minimum_layer2_total_length: type: long
netflow.reverse_minimum_ttl: type: short
netflow.reverse_monitoring_interval_end_milli_seconds: type: long
netflow.reverse_monitoring_interval_start_milli_seconds: type: long
netflow.reverse_mpls_label_stack_depth: type: long
netflow.reverse_mpls_label_stack_length: type: long
netflow.reverse_mpls_label_stack_section: type: keyword
netflow.reverse_mpls_label_stack_section10: type: keyword
netflow.reverse_mpls_label_stack_section2: type: keyword
netflow.reverse_mpls_label_stack_section3: type: keyword
netflow.reverse_mpls_label_stack_section4: type: keyword
netflow.reverse_mpls_label_stack_section5: type: keyword
netflow.reverse_mpls_label_stack_section6: type: keyword
netflow.reverse_mpls_label_stack_section7: type: keyword
netflow.reverse_mpls_label_stack_section8: type: keyword
netflow.reverse_mpls_label_stack_section9: type: keyword
netflow.reverse_mpls_payload_length: type: long
netflow.reverse_mpls_payload_packet_section: type: keyword
netflow.reverse_mpls_top_label_exp: type: short
netflow.reverse_mpls_top_label_ipv4_address: type: ip
netflow.reverse_mpls_top_label_ipv6_address: type: ip
netflow.reverse_mpls_top_label_prefix_length: type: short
netflow.reverse_mpls_top_label_stack_section: type: keyword
netflow.reverse_mpls_top_label_ttl: type: short
netflow.reverse_mpls_top_label_type: type: short
netflow.reverse_mpls_vpn_route_distinguisher: type: keyword
netflow.reverse_multicast_replication_factor: type: long
netflow.reverse_nat_event: type: short
netflow.reverse_nat_originating_address_realm: type: short
netflow.reverse_nat_pool_id: type: long
netflow.reverse_nat_pool_name: type: keyword
netflow.reverse_nat_type: type: short
netflow.reverse_new_connection_delta_count: type: long
netflow.reverse_next_header_ipv6: type: short
netflow.reverse_non_empty_packet_count: type: long
netflow.reverse_not_sent_layer2_octet_total_count: type: long
netflow.reverse_observation_domain_name: type: keyword
netflow.reverse_observation_point_id: type: long
netflow.reverse_observation_point_type: type: short
netflow.reverse_observation_time_microseconds: type: long
netflow.reverse_observation_time_milliseconds: type: long
netflow.reverse_observation_time_nanoseconds: type: long
netflow.reverse_observation_time_seconds: type: long
netflow.reverse_octet_delta_count: type: long
netflow.reverse_octet_delta_sum_of_squares: type: long
netflow.reverse_octet_total_count: type: long
netflow.reverse_octet_total_sum_of_squares: type: long
netflow.reverse_opaque_octets: type: keyword
netflow.reverse_original_exporter_ipv4_address: type: ip
netflow.reverse_original_exporter_ipv6_address: type: ip
netflow.reverse_original_flows_completed: type: long
netflow.reverse_original_flows_initiated: type: long
netflow.reverse_original_flows_present: type: long
netflow.reverse_original_observation_domain_id: type: long
netflow.reverse_os_finger_print: type: keyword
netflow.reverse_os_name: type: keyword
netflow.reverse_os_version: type: keyword
netflow.reverse_p2p_technology: type: keyword
netflow.reverse_packet_delta_count: type: long
netflow.reverse_packet_total_count: type: long
netflow.reverse_payload: type: keyword
netflow.reverse_payload_entropy: type: short
netflow.reverse_payload_length_ipv6: type: integer
netflow.reverse_port_id: type: long
netflow.reverse_port_range_end: type: integer
netflow.reverse_port_range_num_ports: type: integer
netflow.reverse_port_range_start: type: integer
netflow.reverse_port_range_step_size: type: integer
netflow.reverse_post_destination_mac_address: type: keyword
netflow.reverse_post_dot1q_customer_vlan_id: type: integer
netflow.reverse_post_dot1q_vlan_id: type: integer
netflow.reverse_post_ip_class_of_service: type: short
netflow.reverse_post_ip_diff_serv_code_point: type: short
netflow.reverse_post_ip_precedence: type: short
netflow.reverse_post_layer2_octet_delta_count: type: long
netflow.reverse_post_layer2_octet_total_count: type: long
netflow.reverse_post_mcast_layer2_octet_delta_count: type: long
netflow.reverse_post_mcast_layer2_octet_total_count: type: long
netflow.reverse_post_mcast_octet_delta_count: type: long
netflow.reverse_post_mcast_octet_total_count: type: long
netflow.reverse_post_mcast_packet_delta_count: type: long
netflow.reverse_post_mcast_packet_total_count: type: long
netflow.reverse_post_mpls_top_label_exp: type: short
netflow.reverse_post_napt_destination_transport_port: type: integer
netflow.reverse_post_napt_source_transport_port: type: integer
netflow.reverse_post_nat_destination_ipv4_address: type: ip
netflow.reverse_post_nat_destination_ipv6_address: type: ip
netflow.reverse_post_nat_source_ipv4_address: type: ip
netflow.reverse_post_nat_source_ipv6_address: type: ip
netflow.reverse_post_octet_delta_count: type: long
netflow.reverse_post_octet_total_count: type: long
netflow.reverse_post_packet_delta_count: type: long
netflow.reverse_post_packet_total_count: type: long
netflow.reverse_post_source_mac_address: type: keyword
netflow.reverse_post_vlan_id: type: integer
netflow.reverse_private_enterprise_number: type: long
netflow.reverse_protocol_identifier: type: short
netflow.reverse_pseudo_wire_control_word: type: long
netflow.reverse_pseudo_wire_destination_ipv4_address: type: ip
netflow.reverse_pseudo_wire_id: type: long
netflow.reverse_pseudo_wire_type: type: integer
netflow.reverse_relative_error: type: double
netflow.reverse_responder_octets: type: long
netflow.reverse_responder_packets: type: long
netflow.reverse_rfc3550_jitter_microseconds: type: long
netflow.reverse_rfc3550_jitter_milliseconds: type: long
netflow.reverse_rfc3550_jitter_nanoseconds: type: long
netflow.reverse_rtp_payload_type: type: short
netflow.reverse_rtp_sequence_number: type: integer
netflow.reverse_sampler_id: type: short
netflow.reverse_sampler_mode: type: short
netflow.reverse_sampler_name: type: keyword
netflow.reverse_sampler_random_interval: type: long
netflow.reverse_sampling_algorithm: type: short
netflow.reverse_sampling_flow_interval: type: long
netflow.reverse_sampling_flow_spacing: type: long
netflow.reverse_sampling_interval: type: long
netflow.reverse_sampling_packet_interval: type: long
netflow.reverse_sampling_packet_space: type: long
netflow.reverse_sampling_population: type: long
netflow.reverse_sampling_probability: type: double
netflow.reverse_sampling_size: type: long
netflow.reverse_sampling_time_interval: type: long
netflow.reverse_sampling_time_space: type: long
netflow.reverse_second_packet_banner: type: keyword
netflow.reverse_section_exported_octets: type: integer
netflow.reverse_section_offset: type: integer
netflow.reverse_selection_sequence_id: type: long
netflow.reverse_selector_algorithm: type: integer
netflow.reverse_selector_id: type: long
netflow.reverse_selector_id_total_flows_observed: type: long
netflow.reverse_selector_id_total_flows_selected: type: long
netflow.reverse_selector_id_total_pkts_observed: type: long
netflow.reverse_selector_id_total_pkts_selected: type: long
netflow.reverse_selector_name: type: keyword
netflow.reverse_session_scope: type: short
netflow.reverse_small_packet_count: type: long
netflow.reverse_source_ipv4_address: type: ip
netflow.reverse_source_ipv4_prefix: type: ip
netflow.reverse_source_ipv4_prefix_length: type: short
netflow.reverse_source_ipv6_address: type: ip
netflow.reverse_source_ipv6_prefix: type: ip
netflow.reverse_source_ipv6_prefix_length: type: short
netflow.reverse_source_mac_address: type: keyword
netflow.reverse_source_transport_port: type: integer
netflow.reverse_src_traffic_index: type: long
netflow.reverse_sta_ipv4_address: type: ip
netflow.reverse_sta_mac_address: type: keyword
netflow.reverse_standard_deviation_interarrival_time: type: long
netflow.reverse_standard_deviation_payload_length: type: integer
netflow.reverse_system_init_time_milliseconds: type: long
netflow.reverse_tcp_ack_total_count: type: long
netflow.reverse_tcp_acknowledgement_number: type: long
netflow.reverse_tcp_control_bits: type: integer
netflow.reverse_tcp_destination_port: type: integer
netflow.reverse_tcp_fin_total_count: type: long
netflow.reverse_tcp_header_length: type: short
netflow.reverse_tcp_options: type: long
netflow.reverse_tcp_psh_total_count: type: long
netflow.reverse_tcp_rst_total_count: type: long
netflow.reverse_tcp_sequence_number: type: long
netflow.reverse_tcp_source_port: type: integer
netflow.reverse_tcp_syn_total_count: type: long
netflow.reverse_tcp_urg_total_count: type: long
netflow.reverse_tcp_urgent_pointer: type: integer
netflow.reverse_tcp_window_scale: type: integer
netflow.reverse_tcp_window_size: type: integer
netflow.reverse_total_length_ipv4: type: integer
netflow.reverse_transport_octet_delta_count: type: long
netflow.reverse_transport_packet_delta_count: type: long
netflow.reverse_tunnel_technology: type: keyword
netflow.reverse_udp_destination_port: type: integer
netflow.reverse_udp_message_length: type: integer
netflow.reverse_udp_source_port: type: integer
netflow.reverse_union_tcp_flags: type: short
netflow.reverse_upper_ci_limit: type: double
netflow.reverse_user_name: type: keyword
netflow.reverse_value_distribution_method: type: short
netflow.reverse_virtual_station_interface_id: type: keyword
netflow.reverse_virtual_station_interface_name: type: keyword
netflow.reverse_virtual_station_name: type: keyword
netflow.reverse_virtual_station_uuid: type: keyword
netflow.reverse_vlan_id: type: integer
netflow.reverse_vr_fname: type: keyword
netflow.reverse_wlan_channel_id: type: short
netflow.reverse_wlan_ssid: type: keyword
netflow.reverse_wtp_mac_address: type: keyword
netflow.rfc3550_jitter_microseconds: type: long
netflow.rfc3550_jitter_milliseconds: type: long
netflow.rfc3550_jitter_nanoseconds: type: long
netflow.rtp_payload_type: type: short
netflow.rtp_sequence_number: type: integer
netflow.sampler_id: type: short
netflow.sampler_mode: type: short
netflow.sampler_name: type: keyword
netflow.sampler_random_interval: type: long
netflow.sampling_algorithm: type: short
netflow.sampling_flow_interval: type: long
netflow.sampling_flow_spacing: type: long
netflow.sampling_interval: type: long
netflow.sampling_packet_interval: type: long
netflow.sampling_packet_space: type: long
netflow.sampling_population: type: long
netflow.sampling_probability: type: double
netflow.sampling_size: type: long
netflow.sampling_time_interval: type: long
netflow.sampling_time_space: type: long
netflow.second_packet_banner: type: keyword
netflow.section_exported_octets: type: integer
netflow.section_offset: type: integer
netflow.selection_sequence_id: type: long
netflow.selector_algorithm: type: integer
netflow.selector_id: type: long
netflow.selector_id_total_flows_observed: type: long
netflow.selector_id_total_flows_selected: type: long
netflow.selector_id_total_pkts_observed: type: long
netflow.selector_id_total_pkts_selected: type: long
netflow.selector_name: type: keyword
netflow.service_name: type: keyword
netflow.session_scope: type: short
netflow.silk_app_label: type: integer
netflow.small_packet_count: type: long
netflow.source_ipv4_address: type: ip
netflow.source_ipv4_prefix: type: ip
netflow.source_ipv4_prefix_length: type: short
netflow.source_ipv6_address: type: ip
netflow.source_ipv6_prefix: type: ip
netflow.source_ipv6_prefix_length: type: short
netflow.source_mac_address: type: keyword
netflow.source_transport_port: type: integer
netflow.source_transport_ports_limit: type: integer
netflow.src_traffic_index: type: long
netflow.ssl_cert_serial_number: type: keyword
netflow.ssl_cert_signature: type: keyword
netflow.ssl_cert_validity_not_after: type: keyword
netflow.ssl_cert_validity_not_before: type: keyword
netflow.ssl_cert_version: type: short
netflow.ssl_certificate_hash: type: keyword
netflow.ssl_cipher: type: keyword
netflow.ssl_client_version: type: short
netflow.ssl_compression_method: type: short
netflow.ssl_object_type: type: keyword
netflow.ssl_object_value: type: keyword
netflow.ssl_public_key_algorithm: type: keyword
netflow.ssl_public_key_length: type: keyword
netflow.ssl_server_cipher: type: long
netflow.ssl_server_name: type: keyword
netflow.sta_ipv4_address: type: ip
netflow.sta_mac_address: type: keyword
netflow.standard_deviation_interarrival_time: type: long
netflow.standard_deviation_payload_length: type: short
netflow.system_init_time_milliseconds: type: date
netflow.tcp_ack_total_count: type: long
netflow.tcp_acknowledgement_number: type: long
netflow.tcp_control_bits: type: integer
netflow.tcp_destination_port: type: integer
netflow.tcp_fin_total_count: type: long
netflow.tcp_header_length: type: short
netflow.tcp_options: type: long
netflow.tcp_psh_total_count: type: long
netflow.tcp_rst_total_count: type: long
netflow.tcp_sequence_number: type: long
netflow.tcp_source_port: type: integer
netflow.tcp_syn_total_count: type: long
netflow.tcp_urg_total_count: type: long
netflow.tcp_urgent_pointer: type: integer
netflow.tcp_window_scale: type: integer
netflow.tcp_window_size: type: integer
netflow.template_id: type: integer
netflow.tftp_filename: type: keyword
netflow.tftp_mode: type: keyword
netflow.timestamp: type: long
netflow.timestamp_absolute_monitoring-interval: type: long
netflow.total_length_ipv4: type: integer
netflow.traffic_type: type: short
netflow.transport_octet_delta_count: type: long
netflow.transport_packet_delta_count: type: long
netflow.tunnel_technology: type: keyword
netflow.udp_destination_port: type: integer
netflow.udp_message_length: type: integer
netflow.udp_source_port: type: integer
netflow.union_tcp_flags: type: short
netflow.upper_ci_limit: type: double
netflow.user_name: type: keyword
netflow.username: type: keyword
netflow.value_distribution_method: type: short
netflow.viptela_vpn_id: type: long
netflow.virtual_station_interface_id: type: short
netflow.virtual_station_interface_name: type: keyword
netflow.virtual_station_name: type: keyword
netflow.virtual_station_uuid: type: short
netflow.vlan_id: type: integer
netflow.vmware_egress_interface_attr: type: integer
netflow.vmware_ingress_interface_attr: type: integer
netflow.vmware_tenant_dest_ipv4: type: ip
netflow.vmware_tenant_dest_ipv6: type: ip
netflow.vmware_tenant_dest_port: type: integer
netflow.vmware_tenant_protocol: type: short
netflow.vmware_tenant_source_ipv4: type: ip
netflow.vmware_tenant_source_ipv6: type: ip
netflow.vmware_tenant_source_port: type: integer
netflow.vmware_vxlan_export_role: type: short
netflow.vpn_identifier: type: short
netflow.vr_fname: type: keyword
netflow.waasoptimization_segment: type: short
netflow.wlan_channel_id: type: short
netflow.wlan_ssid: type: keyword
netflow.wtp_mac_address: type: keyword
netflow.xlate_destination_address_ip_v4: type: ip
netflow.xlate_destination_port: type: integer
netflow.xlate_source_address_ip_v4: type: ip
netflow.xlate_source_port: type: integer