Gateway Network
The descriptions below detail the fields available for gateway_network.
| Field | Value | Type |
|---|---|---|
| AccountID | Cloudflare account tag. | string |
| Action | Action performed by gateway on the session. | string |
| Datetime | The date and time the corresponding network session was made (for example, ‘2021-07-27T00:01:07Z’). | int or string |
| DestinationIP | Destination IP of the network session. | string |
| DestinationPort | Destination port of the network session. | int |
| DetectedProtocol | Detected traffic protocol of the network session. | string |
| DeviceID | UUID of the device where the network session originated from. | string |
| DeviceName | The name of the device where the HTTP request originated from (for example, ‘Laptop MB810’). | string |
| Email associated with the user identity where the network sesion originated from. | string | |
| OverrideIP | Overriden IP of the network session, if any. | string |
| OverridePort | Overriden port of the network session, if any. | int |
| PolicyID | Identifier of the policy/rule that was applied, if any. | string |
| PolicyName | The name of the gateway policy applied to the request, if any. | string |
| SNI | Content of the SNI for the TLS network session, if any. | string |
| SessionID | The session identifier of this network session. | string |
| SourceIP | Source IP of the network session. | string |
| SourceInternalIP | Local LAN IP of the device. Only available when connected via a GRE/IPsec tunnel on-ramp. | string |
| SourcePort | Source port of the network session. | int |
| Transport | Transport protocol used for this session. Possible values are tcp | quic | udp. | string |
| UserID | User identity where the network session originated from. | string |