Palo Alto Networks · Example Payload

Strata Logging Forwarding Threat Log Payload Example

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Strata Logging Forwarding Threat Log Payload Example is an example object payload from Palo Alto Networks, with 24 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

receive_timeserialtypesubtypesrcdstsportdportprotoappthreat_nameseverityactiondirectionthreat_idrule_namesrc_zonedst_zonesrc_userurl_or_filenamedevice_namevsyslog_forwarding_profileoutput_format

Example Payload

{
  "receive_time": "2024-12-20T20:59:52Z",
  "serial": "0A473BC54FAC",
  "type": "THREAT",
  "subtype": "flood",
  "src": "example-src",
  "dst": "example-dst",
  "sport": 989,
  "dport": 759,
  "proto": "example-proto",
  "app": "dns",
  "threat_name": "Primary Gateway 21",
  "severity": "informational",
  "action": "reset-server",
  "direction": "client-to-server",
  "threat_id": "352391",
  "rule_name": "Production Sensor 64",
  "src_zone": "internal",
  "dst_zone": "untrust",
  "src_user": "jsmith",
  "url_or_filename": "Corporate Cluster 99",
  "device_name": "Corporate Gateway 77",
  "vsys": "example-vsys",
  "log_forwarding_profile": "Network Printer",
  "output_format": "CEF"
}