| Field Name | Example Values | Field Type | Notes |
|---|---|---|---|
application_name
|
Facebook, SQL, windows_rdp | keyword (normalized:loweronly) |
Name of the application, this can be a layer 7 application name for network traffic, the name of an authenticating service/program for authentication, etc. |
application_response_time
|
keyword | Amount of time Applications Take to give response to a request | |
application_sso_signonmode
|
keyword | For Single Sign-On (SSO) events this is the method used to access the application | |
application_sso_target_name
|
keyword | For SSO events this is the name of the application being accessed |
The following content is part of the Graylog Illuminate 6.3 documentation. If you are using another version of Illuminate, please switch to your version. For versions prior to 4.0, please see the legacy documentation.
