Palo Alto Networks · Schema

UserActivity

UserActivity schema from Palo Alto Networks SaaS Security API

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Properties

Name Type Description
id string Unique activity record identifier.
user_id string ID of the user who performed the action.
app_id string SaaS application where the activity occurred.
action string Type of action performed (e.g., file_download, share_external).
asset_id string ID of the asset involved in the activity.
timestamp string Timestamp when the activity occurred.
ip_address string Source IP address of the activity.
risk_level string Risk level assigned to this activity.
View JSON Schema on GitHub