跳转到内容
搜索文档

NAv1 到 NAv2 schema 映射

最后更新 查看 MarkdownAgent 设置

下表列出 NAv1 与 NAv2 字段之间的直接映射(如有),并在无直接映射时提供相关字段。

ipFlows1mGroups

magicTransitNetworkAnalytics-AdaptiveGroups /
spectrumNetworkAnalytics-AdaptiveGroups

dosdNetworkAnalytics-AdaptiveGroupsdosdAttackAnalytics-GroupsflowtrackdNetworkAnalytics-AdaptiveGroupsmagicFirewallNetworkAnalytics-AdaptiveGroups
date相关字段:
datetime
datetimeTenSeconds
相关字段:
datetime
datetimeTenSeconds
相关字段:
datetime
datetimeTenSeconds
相关字段:
datetime
datetimeTenSeconds
datetimeMinutedatetimeMinutedatetimeMinutedatetimeMinutedatetimeMinute
datetimeFiveMinutesdatetimeFiveMinutesdatetimeFiveMinutesdatetimeFiveMinutesdatetimeFiveMinutes
datetimeFifteenMinutesdatetimeFifteenMinutesdatetimeFifteenMinutesdatetimeFifteenMinutesdatetimeFifteenMinutes
datetimeHourdatetimeHourdatetimeHourdatetimeHourdatetimeHour

attackId*

attackId*

attackId*

attackTypeattackType
attackMitigationTypemitigationType
sourceIPCountrysourceCountrysourceCountrysourceCountrysourceCountry
sourceIPAsnsourceAsnsourceAsnsourceAsnsourceAsn
sourceIPASNDescription相关字段:
sourceGeohash
相关字段:
sourceGeohash
相关字段:
sourceGeohash
相关字段:
sourceGeohash
coloCodecoloCodecoloCodecoloCodecoloCode
coloCitycoloCitycoloCitycoloCitycoloCity
coloCountrycoloCountrycoloCountrycoloCountrycoloCountry
coloRegion相关字段:
coloGeohash
相关字段:
coloGeohash
相关字段:
coloGeohash
相关字段:
coloGeohash
ipFlows1mGroups

magicTransitNetworkAnalytics-AdaptiveGroups /
spectrumNetworkAnalytics-AdaptiveGroups

dosdNetworkAnalytics-AdaptiveGroupsdosdAttackAnalytics-GroupsflowtrackdNetworkAnalytics-AdaptiveGroupsmagicFirewallNetworkAnalytics-AdaptiveGroups
ipVersionethertypeethertypeethertypeethertype
bits

ipTotalLength
bits 除以 8)

ipTotalLength
bits 除以 8)

bits

ipTotalLength
bits 除以 8)

ipTotalLength
bits 除以 8)

packetsn/an/apacketsn/an/a
ipProtocolipProtocolipProtocolipProtocolipProtocolipProtocol
sourceIPipSourceAddressipSourceAddresssourceIpipSourceAddressipSourceAddress
destinationIPipDestinationAddressipDestinationAddressdestinationIpipDestinationAddressipDestinationAddress
destinationIPv4Range24ipDestinationSubnetipDestinationSubnetipDestinationSubnetipDestinationSubnet
destinationIPv4Range23n/an/an/an/a
sourcePortsourcePortsourcePortsourcePortsourcePortsourcePort
destinationPortdestinationPortdestinationPortdestinationPortdestinationPortdestinationPort
tcpFlagstcpFlagstcpFlagstcpFlagstcpFlagstcpFlags
  • 对于同一个攻击,NAv1 和 NAv2 之间的 attackId 字段值可能会有所不同。

这篇文档对您有帮助吗?