# Web Security Gateway

Version 1.1

Proxy web, Web Proxy - Web security etc.,

\
Please check back often. These tables are updated regularly to accommodate new fields as provided by vendors.

| **Field Name**                      | **Data Type** |
| ----------------------------------- | ------------- |
| agent.type                          | text          |
| destination.as.organization.name    | text          |
| destination.geo.city\_name          | text          |
| destination.geo.continent\_code     | text          |
| destination.geo.country\_code       | text          |
| destination.geo.country\_name       | text          |
| destination.geo.location.lat        | geopoint      |
| destination.geo.location.lon        | geopoint      |
| destination.geo.region\_name        | text          |
| destination.ip                      | ip            |
| destination.locality                | text          |
| event.action                        | text          |
| event.category                      | array         |
| event.created                       | date          |
| event.dataset                       | text          |
| event.id                            | text          |
| event.kind                          | text          |
| event.module                        | text          |
| event.original                      | text          |
| event.outcome                       | text          |
| event.reason                        | text          |
| event.risk\_score                   | int           |
| event.severity                      | text          |
| event.type                          | array         |
| http.request.bytes                  | int           |
| http.request.method                 | text          |
| http.request.mime\_type             | text          |
| http.request.referrer               | text          |
| http.response.bytes                 | int           |
| http.response.status\_code          | int           |
| log.type                            | text          |
| network.community\_id               | text          |
| network.protocol                    | text          |
| observer.type                       | text          |
| organisation.id                     | text          |
| related.hash                        | array         |
| related.hosts                       | array         |
| related.ip                          | array         |
| related.user                        | array         |
| rule.name                           | text          |
| rule.ruleset                        | text          |
| sensor.id                           | text          |
| source.as.number                    | text          |
| source.as.number                    | text          |
| source.as.organization.name         | text          |
| source.geo.city\_name               | text          |
| source.geo.continent\_code          | text          |
| source.geo.country\_code            | text          |
| source.geo.country\_name            | text          |
| source.geo.location.lat             | geopoint      |
| source.geo.location.lon             | geopoint      |
| source.geo.region\_name             | text          |
| source.locality                     | text          |
| source.nat.ip                       | ip            |
| source.user.name                    | text          |
| threatintel.days                    | int           |
| threatintel.entity                  | text          |
| threatintel.event\_data             | text          |
| threatintel.lookup                  | text          |
| threatintel.malware.malware         | text          |
| threatintel.malware.timestamp       | date/time     |
| threatintel.severity                | text          |
| threatintel.tags                    | text          |
| threatintel.white\_list             | text          |
| url.original                        | text          |
| user\_agent.original                | text          |
| user.email                          | text          |
| uuid                                | text          |
| zscaler\_zia.web.app.name           | text          |
| zscaler\_zia.web.department         | text          |
| zscaler\_zia.web.device.hostname    | text          |
| zscaler\_zia.web.malware.category   | text          |
| zscaler\_zia.web.threat.name        | text          |
| zscaler\_zia.web.unscannable.type   | text          |
| zscaler\_zia.web.url.category.sub   | text          |
| zscaler\_zia.web.url.category.super | text          |
| zscaler\_zia.web.url.class          | text          |