---
title: Pensando fields
description: pensando Module Fields from Pensando logs. Fields for Pensando DFW 
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/filebeat/exported-fields-pensando
products:
  - Beats
  - Filebeat
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Pensando fields
pensando Module

## pensando

Fields from Pensando logs.

## dfw

<applies-to>
  - Elastic Stack: Beta
</applies-to>

Fields for Pensando DFW
<definitions>
  <definition term="pensando.dfw.action">
    Action on the flow.
    type: keyword
  </definition>
  <definition term="pensando.dfw.app_id">
    Application ID
    type: integer
  </definition>
  <definition term="pensando.dfw.destination_address">
    Address of destination.
    type: keyword
  </definition>
  <definition term="pensando.dfw.destination_port">
    Port of destination.
    type: integer
  </definition>
  <definition term="pensando.dfw.direction">
    Direction of the flow
    type: keyword
  </definition>
  <definition term="pensando.dfw.protocol">
    Protocol of the flow
    type: keyword
  </definition>
  <definition term="pensando.dfw.rule_id">
    Rule ID that was matched.
    type: keyword
  </definition>
  <definition term="pensando.dfw.session_id">
    Session ID of the flow
    type: integer
  </definition>
  <definition term="pensando.dfw.session_state">
    Session state of the flow.
    type: keyword
  </definition>
  <definition term="pensando.dfw.source_address">
    Source address of the flow.
    type: keyword
  </definition>
  <definition term="pensando.dfw.source_port">
    Source port of the flow.
    type: integer
  </definition>
  <definition term="pensando.dfw.timestamp">
    Timestamp of the log.
    type: date
  </definition>
</definitions>