9.5.3. opennac-*

Field	Description
@timestamp	The timestamp indicating when the event occurred
@version	The version of the log entry
_id	The unique identifier of the log entry
_index	The index where the log entry is stored
_score	The relevance score of the log entry in search results
_source	The original source of the log entry
_type	The type of the log entry
agent.ephemeral_id	Agent’s temporary identifier
agent.hostname	Agent’s host name
agent.id	Agent’s identification number
agent.type	Agent type
agent.version	Agent version
document_type	Document type
ecs.version	Version of the Elastic Common Schema (ECS) being used
host	Host
input.type	Type of log input
opennac_businessProfiles	Business profiles associated with OpenNAC
opennac_fullsource	Full source of the log in OpenNAC
opennac_hostname	Hostname associated with OpenNAC
opennac_id	ID associated with OpenNAC
opennac_ip	IP address associated with OpenNAC
opennac_mac	MAC address associated with OpenNAC
opennac_module	Module associated with OpenNAC
opennac_netdev	Network device associated with OpenNAC
opennac_netdevmac	Network device MAC address associated with OpenNAC
opennac_netdevport	Network device port associated with OpenNAC
opennac_rule	Rule associated with OpenNAC
opennac_sessionid	Session ID associated with OpenNAC
opennac_source	Source of the event in OpenNAC
opennac_ssid	SSID (Service Set Identifier) associated with OpenNAC
opennac_status	Status of the event in OpenNAC
opennac_statusmsg	Status message associated with the event in OpenNAC
opennac_statustxt	Status text associated with the event in OpenNAC
opennac_tags_on	Tags associated with OpenNAC
opennac_trackid	User session track ID in OpenNAC
opennac_trackidevent	Event associated with the user session track ID in OpenNAC
opennac_userid	User ID in OpenNAC
type	Type name
opennac_tagsnetdev_on	Tags associated with network devices in OpenNAC
opennac_macxswitchport.macs	MAC addresses associated with switch ports in the OpenNAC system
opennac_macxswitchport.macs_old	Previous MAC addresses associated with switch ports in the OpenNAC system
opennac_macxswitchport.netdev	Network devices associated with switch ports in the OpenNAC system
opennac_macxswitchport.netdevport	Network devices port associated with the OpenNAC system
opennac_macxswitchport.qty	Quantity or count of MAC addresses associated with a specific switch port in the OpenNAC system
opennac_macxswitchport.qtydiff	Indicates the change in the number of MAC addresses associated with the port since the last measurement
opennac_netdevportdesc	Description of a network device port in the OpenNAC system
opennac_source_module	Source module associated with OpenNAC
opennac_time_poleval	Time of policy evaluation in OpenNAC
opennac_time_worker	Time when the event was processed by a worker in OpenNAC
opennac_time_queued	Time when the event was queued in OpenNAC
opennac_result.lasteval
opennac_result.policy_rulename
opennac_result.policy_rulenum
opennac_result.policyid
opennac_result.vlan
opennac_result.vlanid
opennac_result.vlanidpre
opennac_certdata.caCertCommonName
opennac_certdata.caCertIssuer
opennac_certdata.caCertSubject
opennac_certdata.clientCertCommonName
opennac_certdata.clientCertIssuer
opennac_certdata.clientCertSubject
opennac_sessiondata.TLS-Cert-Common-Name	Common name (CN) associated with the TLS certificate in a session in OpenNAC
opennac_sessiondata.TLS-Cert-Issuer	Issuer of the TLS certificate in a session in OpenNAC
opennac_sessiondata.TLS-Cert-Serial	Serial number of the TLS certificate in a session in OpenNAC
opennac_sessiondata.TLS-Cert-Subject	Subject of the TLS certificate in a session in OpenNAC
opennac_sessiondata.TLS-Client-Cert-Common-Name	Common name of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-Issuer	Issuer of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-Serial	Serial number of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-Subject	Subject of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-X509v3-Extended-Key-Usage	Extended key usage of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-X509v3-Extended-Key-Usage-OID	OID (Object Identifier) of the extended key usage of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Session-Cipher-Suite	Cipher suite used in the TLS session in OpenNAC session data
opennac_sessiondata.TLS-Cert-Expiration	Expiration date of the TLS certificate in OpenNAC session data
opennac_sessiondata.TLS-Client-Cert-Expiration	Expiration date of the TLS client certificate in OpenNAC session data
opennac_sessiondata.TLS-Session-Version	Version of the TLS session in OpenNAC session data
opennac_sessiondata.User-Name	User name associated with the OpenNAC session
opennac_sessiondata.FreeRADIUS-Proxied-To	Destination of the FreeRADIUS proxy in OpenNAC session data
opennac_sessiondata.EAP-Type	EAP type used in the OpenNAC session
opennac_sessiondata.Service-Type	Service type of the OpenNAC session
opennac_sessiondata.Acct-Session-Id	Accounting session ID in OpenNAC session data
opennac_sessiondata.Acct-Multi-Session-Id	Multi-session ID for accounting in OpenNAC session data
opennac_sessiondata.Acct-Unique-Session-Id	Unique session ID for accounting in OpenNAC session data
opennac_sessiondata.Framed-IP-Address	IP address assigned to the framed network in OpenNAC session data
opennac_sessiondata.Acct-Terminate-Cause	Termination cause of the accounting session in OpenNAC session data
opennac_sessiondata.Acct-Authentic	Indicates if the accounting session is authentic in OpenNAC session data
opennac_sessiondata.Acct-Status-Type	Status type of the accounting session in OpenNAC session data
opennac_sessiondata.Acct-Input-Packets	Number of input packets for accounting in OpenNAC session data
opennac_sessiondata.Acct-Output-Packets	Number of output packets for accounting in OpenNAC session data
opennac_sessiondata.Acct-Input-Octets	Number of input octets for accounting in OpenNAC session data
opennac_sessiondata.Acct-Output-Octets	Number of output octets for accounting in OpenNAC session data
opennac_sessiondata.Acct-Session-Time	Duration of the accounting session in OpenNAC session data
opennac_sessiondata.Proxy-State	State of the proxy in OpenNAC session data
opennac_result.hostname	Hostname associated with the OpenNAC result
opennac_result.timestamp	Timestamp of the OpenNAC result
opennac_certdata	Certificate data in OpenNAC
opennac_sessiondata.Event-Timestamp	Timestamp of the event in OpenNAC session data
opennac_sessiondata.Module-Failure-Message	Failure message associated with a module in OpenNAC session data
opennac_sessiondata.NAS-IP-Address	IP address of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.Post-Auth-Type	Post-authentication type in OpenNAC session data
log.file.path	File path of the log entry
log.offset	Offset of the log entry
anonymization	Anonymization data
tags	Tags associated with the log entry
opennac_result.trackid	Track ID associated with the OpenNAC result
opennac_sessiondata.Acct-Delay-Time	Delay time for accounting in OpenNAC session data
opennac_sessiondata.CHAP-Challenge	CHAP (Challenge-Handshake Authentication Protocol) challenge in OpenNAC session data
opennac_sessiondata.CHAP-Password	CHAP password in OpenNAC session data
opennac_sessiondata.Called-Station-Id	Called station ID in OpenNAC session data
opennac_sessiondata.Calling-Station-Id	Calling station ID in OpenNAC session data
opennac_sessiondata.Connect-Info	Connection information in OpenNAC session data
opennac_sessiondata.Event-Timestamp	Timestamp for the event in OpenNAC session data
opennac_sessiondata.Framed-MTU	MTU (Maximum Transmission Unit) for the framed network in OpenNAC session data
opennac_sessiondata.Framed-Protocol	Protocol used for framing in OpenNAC session data
opennac_sessiondata.HP-Capability-Advert	Advertised HP (Hewlett Packard) capability in OpenNAC session data
opennac_sessiondata.MS-RAS-Vendor	Vendor for MS-RAS (Microsoft Remote Access Server) in OpenNAC session data
opennac_sessiondata.NAS-Port	Port number of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.NAS-Port-Id	Port ID of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.NAS-Port-Type	Port type of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.NAS-IP-Address	IP address of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.Message-Authenticator	Authenticator message in OpenNAC session data
opennac_sessiondata.NAS-Identifier	Identifier of the NAS (Network Access Server) in OpenNAC session data
opennac_sessiondata.Tmp-String-9	Temporary string value in OpenNAC session data
opennac_result.pluginparams.manageTags_delTagLogout	Parameter for TagLogout in OpenNAC result
opennac_sessiondata.Cisco-AVPair	Cisco AVPair attribute in OpenNAC session data
opennac_sessiondata.PMIP6-Home-HN-Prefix	PMIP6 Home HN (Home Network) Prefix attribute in OpenNAC session data
opennac_result.status	Status attribute in OpenNAC result data
opennac_result.statusmodule	Status module attribute in OpenNAC result data
opennac_result.pluginparams.VPNGW-Role	VPN Gateway Role attribute in OpenNAC result plugin parameters
opennac_sessiondata.email	Email attribute in OpenNAC session data
opennac_sessiondata.token	Token attribute in OpenNAC session data
opennac_sessiondata.userGroups	User groups attribute in OpenNAC session data
opennac_result.vsa_dynamic	Vendor-Specific Attribute (VSA) dynamic attribute in OpenNAC result data