Elastic Stack Field Listing: wl_*
The following is a complete list of all Data Set Fields aggregated into the "wl_*" top level indices aggregation.
name
type
_id
string
_index
string
_score
number
_source
_source
_type
string
@timestamp
date
area_code
string
area_code.keyword
string
attacker_server
string
attacker_server.keyword
string
attribution
string
attribution.keyword
string
beat.hostname
string
beat.hostname.keyword
string
beat.name
string
beat.name.keyword
string
city
string
city.keyword
string
comment
string
comment.keyword
string
confidence
number
context
string
context.keyword
string
count_rec
number
country
string
country.keyword
string
cs_asn
string
cs_asn.keyword
string
cs_bytes
string
cs_bytes.keyword
string
cs_cookie
string
cs_cookie.keyword
string
cs_host
string
cs_host.keyword
string
cs_method
string
cs_method.keyword
string
cs_referrer
string
cs_referrer.keyword
string
cs_ua
string
cs_ua.keyword
string
cs_uri_query
string
cs_uri_query.keyword
string
cs_uri_stem
string
cs_uri_stem.keyword
string
cs_username
string
cs_username.keyword
string
cs_version
string
cs_version.keyword
string
cs_whois
string
cs_whois.keyword
string
cve_id
string
cve_id.keyword
string
description
string
description.keyword
string
detection
number
detection_name
string
detection_name.keyword
string
detection_shortname
string
detection_shortname.keyword
string
detections
string
detections.keyword
string
domain_cat
string
domain_cat.keyword
string
email_type
string
email_type.keyword
string
etl_date
date
file
string
file.keyword
string
first_seen
date
indicator
string
indicator_context
string
indicator_context.keyword
string
indicator_type
string
indicator_type.keyword
string
indicator.keyword
string
label
string
label.keyword
string
last_seen
date
location
conflict
location.keyword
string
negative_sentiment
number
neutral_sentiment
number
password_redact
string
password_redact.keyword
string
positive_sentiment
number
postal_code
string
postal_code.keyword
string
process_type
string
process_type.keyword
string
raw_data_file
string
raw_data_file.keyword
string
raw_datafile
string
raw_datafile.keyword
string
rdata
string
rdata.keyword
string
recipients
string
recipients.keyword
string
reference
string
reference_domain
string
reference_domain.keyword
string
reference_title
string
reference_title.keyword
string
reference.keyword
string
region
string
region.keyword
string
root_node
string
root_node.keyword
string
rrname
string
rrname.keyword
string
s_ip
string
s_ip.keyword
string
s_port
string
s_port.keyword
string
sc_bytes
string
sc_bytes.keyword
string
sc_status
string
sc_status.keyword
string
sc_substatus
string
sc_substatus.keyword
string
sc_win32_status
string
sc_win32_status.keyword
string
search_entity
string
search_entity.keyword
string
search_term
string
search_term.keyword
string
sender
string
sender.keyword
string
source
string
source.keyword
string
subject_line
string
subject_line.keyword
string
tag
string
tag.keyword
string
targets
string
targets.keyword
string
type
string
type.keyword
string
url_cat
string
url_cat.keyword
string
username
string
username.keyword
string
vendor
string
vendor.keyword
string
victim_src_ip
string
victim_src_ip.keyword
string
victim_whois
string
victim_whois.keyword
string
Last updated