https://logit.io/docs/_next/static/chunks/pages/ecs-field-reference/8.17/client-f6a3e5619a51d425.js

1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[10348],{40054:function(e,n,i){(window.__NEXT_P=window.__NEXT_P||[]).push(["/ecs-field-reference/8.17/client",function(){return i(26343)}])},26343:function(e,n,i){"use strict";i.r(n),i.d(n,{__toc:function(){return l}});var r=i(85893),d=i(31379),s=i(9575),t=i(67904),c=i(34908);let l=[{depth:2,value:"Fields",id:"fields"},{depth:3,value:"Field Summary",id:"field-summary"},{depth:2,value:"Field Details",id:"field-details"},{depth:3,value:"client.address",id:"clientaddress"},{depth:3,value:"client.as.number",id:"clientasnumber"},{depth:3,value:"client.as.organization.name",id:"clientasorganizationname"},{depth:3,value:"client.as.organization.name.text",id:"clientasorganizationnametext"},{depth:3,value:"client.bytes",id:"clientbytes"},{depth:3,value:"client.domain",id:"clientdomain"},{depth:3,value:"client.geo.city_name",id:"clientgeocity_name"},{depth:3,value:"client.geo.continent_code",id:"clientgeocontinent_code"},{depth:3,value:"client.geo.continent_name",id:"clientgeocontinent_name"},{depth:3,value:"client.geo.country_iso_code",id:"clientgeocountry_iso_code"},{depth:3,value:"client.geo.country_name",id:"clientgeocountry_name"},{depth:3,value:"client.geo.location",id:"clientgeolocation"},{depth:3,value:"client.geo.name",id:"clientgeoname"},{depth:3,value:"client.geo.postal_code",id:"clientgeopostal_code"},{depth:3,value:"client.geo.region_iso_code",id:"clientgeoregion_iso_code"},{depth:3,value:"client.geo.region_name",id:"clientgeoregion_name"},{depth:3,value:"client.geo.timezone",id:"clientgeotimezone"},{depth:3,value:"client.ip",id:"clientip"},{depth:3,value:"client.mac",id:"clientmac"},{depth:3,value:"client.nat.ip",id:"clientnatip"},{depth:3,value:"client.nat.port",id:"clientnatport"},{depth:3,value:"client.packets",id:"clientpackets"},{depth:3,value:"client.port",id:"clientport"},{depth:3,value:"client.registered_domain",id:"clientregistered_domain"},{depth:3,value:"client.subdomain",id:"clientsubdomain"},{depth:3,value:"client.top_level_domain",id:"clienttop_level_domain"},{depth:3,value:"client.user.domain",id:"clientuserdomain"},{depth:3,value:"client.user.email",id:"clientuseremail"},{depth:3,value:"client.user.full_name",id:"clientuserfull_name"},{depth:3,value:"client.user.full_name.text",id:"clientuserfull_nametext"},{depth:3,value:"client.user.group.domain",id:"clientusergroupdomain"},{depth:3,value:"client.user.group.id",id:"clientusergroupid"},{depth:3,value:"client.user.group.name",id:"clientusergroupname"},{depth:3,value:"client.user.hash",id:"clientuserhash"},{depth:3,value:"client.user.id",id:"clientuserid"},{depth:3,value:"client.user.name",id:"clientusername"},{depth:3,value:"client.user.name.text",id:"clientusernametext"},{depth:3,value:"client.user.roles",id:"clientuserroles"}];function o(e){let n=Object.assign({h1:"h1",blockquote:"blockquote",p:"p",h2:"h2",h3:"h3",table:"table",thead:"thead",tr:"tr",th:"th",tbody:"tbody",td:"td",a:"a",code:"code",strong:"strong"},(0,s.a)(),e.components);return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(c.Z,{structuredData:[{"@context":"https://schema.org","@type":"TechArticle",headline:"Client Fields (38 fields) | Logit.io ECS Client Field Set Reference",description:"Complete reference for client fields in Logit.io ECS Schema (Elastic Common Schema). Includes 38 fields (19 core, 19 extended). Fields about the client ...",author:{"@type":"Organization",name:"Logit.io",url:"https://logit.io"},publisher:{"@type":"Organization",name:"Logit.io",logo:{"@type":"ImageObject",url:"https://logit.io/docs/logit-icon-125x125.png"}},datePublished:"2026-09-08T13:39:53.412Z",dateModified:"2026-09-08T13:39:53.412Z",mainEntityOfPage:{"@type":"WebPage","@id":"https://logit.io/docs/ecs-field-reference/client"},about:{"@type":"Thing",name:"Elastic Common Schema (ECS)",description:"Open-source specification for field names and data types"}}],breadcrumbData:{"@context":"https://schema.org","@type":"BreadcrumbList",itemListElement:[{"@type":"ListItem",position:1,name:"Documentation",item:"https://logit.io/docs/"},{"@type":"ListItem",position:2,name:"ECS Field Reference",item:"https://logit.io/docs/ecs-field-reference/"},{"@type":"ListItem",position:3,name:"Client",item:"https://logit.io/docs/ecs-field-reference/8.17/client"}]},productVersion:"8.17",productName:"Logit.io ECS Schema",websiteArea:"documentation",isLatestVersion:!1}),"\n",(0,r.jsx)(t.Z,{id:"version-selector-client",versions:["9.0","8.17","1.12"],currentVersion:"8.17",fieldSetName:"client",isLatest:!1}),"\n",(0,r.jsx)(n.h1,{children:"Client"}),"\n",(0,r.jsxs)(n.blockquote,{children:["\n",(0,r.jsx)(n.p,{children:"Fields about the client side of a network connection, used with server."}),"\n"]}),"\n",(0,r.jsx)(n.h2,{id:"fields",children:"Fields"}),"\n",(0,r.jsx)(n.h3,{id:"field-summary",children:"Field Summary"}),"\n",(0,r.jsxs)(n.table,{children:[(0,r.jsx)(n.thead,{children:(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.th,{children:"Field"}),(0,r.jsx)(n.th,{children:"Type"}),(0,r.jsx)(n.th,{children:"Level"}),(0,r.jsx)(n.th,{children:"Description"})]})}),(0,r.jsxs)(n.tbody,{children:[(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-address",children:(0,r.jsx)(n.code,{children:"client.address"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Client network address."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-as-number",children:(0,r.jsx)(n.code,{children:"client.as.number"})})}),(0,r.jsx)(n.td,{children:"long"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Unique number allocated to the autonomous system."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-as-organization-name",children:(0,r.jsx)(n.code,{children:"client.as.organization.name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Organization name."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-as-organization-name-text",children:(0,r.jsx)(n.code,{children:"client.as.organization.name.text"})})}),(0,r.jsx)(n.td,{children:"match_only_text"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Organization name."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-bytes",children:(0,r.jsx)(n.code,{children:"client.bytes"})})}),(0,r.jsx)(n.td,{children:"long"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Bytes sent from the client to the server."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-domain",children:(0,r.jsx)(n.code,{children:"client.domain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"The domain name of the client."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-city-name",children:(0,r.jsx)(n.code,{children:"client.geo.city_name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"City name."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-continent-code",children:(0,r.jsx)(n.code,{children:"client.geo.continent_code"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Continent code."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-continent-name",children:(0,r.jsx)(n.code,{children:"client.geo.continent_name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Name of the continent."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-country-iso-code",children:(0,r.jsx)(n.code,{children:"client.geo.country_iso_code"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Country ISO code."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-country-name",children:(0,r.jsx)(n.code,{children:"client.geo.country_name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Country name."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-location",children:(0,r.jsx)(n.code,{children:"client.geo.location"})})}),(0,r.jsx)(n.td,{children:"geo_point"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Longitude and latitude."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-name",children:(0,r.jsx)(n.code,{children:"client.geo.name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"User-defined description of a location."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-postal-code",children:(0,r.jsx)(n.code,{children:"client.geo.postal_code"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Postal code."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-region-iso-code",children:(0,r.jsx)(n.code,{children:"client.geo.region_iso_code"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Region ISO code."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-region-name",children:(0,r.jsx)(n.code,{children:"client.geo.region_name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Region name."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-geo-timezone",children:(0,r.jsx)(n.code,{children:"client.geo.timezone"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Time zone."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-ip",children:(0,r.jsx)(n.code,{children:"client.ip"})})}),(0,r.jsx)(n.td,{children:"ip"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"IP address of the client."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-mac",children:(0,r.jsx)(n.code,{children:"client.mac"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"MAC address of the client."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-nat-ip",children:(0,r.jsx)(n.code,{children:"client.nat.ip"})})}),(0,r.jsx)(n.td,{children:"ip"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Client NAT ip address"})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-nat-port",children:(0,r.jsx)(n.code,{children:"client.nat.port"})})}),(0,r.jsx)(n.td,{children:"long"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Client NAT port"})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-packets",children:(0,r.jsx)(n.code,{children:"client.packets"})})}),(0,r.jsx)(n.td,{children:"long"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Packets sent from the client to the server."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-port",children:(0,r.jsx)(n.code,{children:"client.port"})})}),(0,r.jsx)(n.td,{children:"long"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Port of the client."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-registered-domain",children:(0,r.jsx)(n.code,{children:"client.registered_domain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"The highest registered client domain, stripped of the subdomain."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-subdomain",children:(0,r.jsx)(n.code,{children:"client.subdomain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"The subdomain of the domain."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-top-level-domain",children:(0,r.jsx)(n.code,{children:"client.top_level_domain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"The effective top level domain (com, org, net, co.uk)."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-domain",children:(0,r.jsx)(n.code,{children:"client.user.domain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Name of the directory the user is a member of."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-email",children:(0,r.jsx)(n.code,{children:"client.user.email"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"User email address."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-full-name",children:(0,r.jsx)(n.code,{children:"client.user.full_name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"User's full name, if available."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-full-name-text",children:(0,r.jsx)(n.code,{children:"client.user.full_name.text"})})}),(0,r.jsx)(n.td,{children:"match_only_text"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"User's full name, if available."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-group-domain",children:(0,r.jsx)(n.code,{children:"client.user.group.domain"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Name of the directory the group is a member of."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-group-id",children:(0,r.jsx)(n.code,{children:"client.user.group.id"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Unique identifier for the group on the system/platform."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-group-name",children:(0,r.jsx)(n.code,{children:"client.user.group.name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Name of the group."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-hash",children:(0,r.jsx)(n.code,{children:"client.user.hash"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Unique user hash to correlate information for a user in anonymized form."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-id",children:(0,r.jsx)(n.code,{children:"client.user.id"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Unique identifier of the user."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-name",children:(0,r.jsx)(n.code,{children:"client.user.name"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Short name or login of the user."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-name-text",children:(0,r.jsx)(n.code,{ch

1ildren:"client.user.name.text"})})}),(0,r.jsx)(n.td,{children:"match_only_text"}),(0,r.jsx)(n.td,{children:(0,r.jsx)(n.strong,{children:"Core"})}),(0,r.jsx)(n.td,{children:"Short name or login of the user."})]}),(0,r.jsxs)(n.tr,{children:[(0,r.jsx)(n.td,{children:(0,r.jsx)(n.a,{href:"#client-user-roles",children:(0,r.jsx)(n.code,{children:"client.user.roles"})})}),(0,r.jsx)(n.td,{children:"keyword"}),(0,r.jsx)(n.td,{children:"Extended"}),(0,r.jsx)(n.td,{children:"Array of user roles at the time of the event."})]})]})]}),"\n",(0,r.jsx)(n.h2,{id:"field-details",children:"Field Details"}),"\n",(0,r.jsx)("a",{id:"client-address","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientaddress",children:(0,r.jsx)(n.code,{children:"client.address"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Client network address."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-as-number","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientasnumber",children:(0,r.jsx)(n.code,{children:"client.as.number"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"long"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Unique number allocated to the autonomous system."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"15169"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-as-organization-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientasorganizationname",children:(0,r.jsx)(n.code,{children:"client.as.organization.name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Organization name."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Google LLC"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-as-organization-name-text","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientasorganizationnametext",children:(0,r.jsx)(n.code,{children:"client.as.organization.name.text"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"match_only_text"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Organization name."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Google LLC"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-bytes","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientbytes",children:(0,r.jsx)(n.code,{children:"client.bytes"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"long"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Bytes sent from the client to the server."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"184"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-domain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientdomain",children:(0,r.jsx)(n.code,{children:"client.domain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," The domain name of the client."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"foo.example.com"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-city-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeocity_name",children:(0,r.jsx)(n.code,{children:"client.geo.city_name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," City name."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Montreal"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-continent-code","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeocontinent_code",children:(0,r.jsx)(n.code,{children:"client.geo.continent_code"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Continent code."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"NA"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-continent-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeocontinent_name",children:(0,r.jsx)(n.code,{children:"client.geo.continent_name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Name of the continent."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"North America"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-country-iso-code","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeocountry_iso_code",children:(0,r.jsx)(n.code,{children:"client.geo.country_iso_code"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Country ISO code."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"CA"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-country-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeocountry_name",children:(0,r.jsx)(n.code,{children:"client.geo.country_name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Country name."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Canada"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-location","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeolocation",children:(0,r.jsx)(n.code,{children:"client.geo.location"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"geo_point"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Longitude and latitude."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:'{ "lon": -73.614830, "lat": 45.505918 }'})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeoname",children:(0,r.jsx)(n.code,{children:"client.geo.name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," User-defined description of a location."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"boston-dc"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-postal-code","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeopostal_code",children:(0,r.jsx)(n.code,{children:"client.geo.postal_code"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Postal code."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"94040"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-region-iso-code","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeoregion_iso_code",children:(0,r.jsx)(n.code,{children:"client.geo.region_iso_code"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Region ISO code."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"CA-QC"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-region-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeoregion_name",children:(0,r.jsx)(n.code,{children:"client.geo.region_name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Region name."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Quebec"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-geo-timezone","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientgeotimezone",children:(0,r.jsx)(n.code,{children:"client.geo.timezone"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Time zone."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"America/Argentina/Buenos_Aires"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-ip","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientip",children:(0,r.jsx)(n.code,{children:"client.ip"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"ip"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," IP address of the client."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-mac","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientmac",children:(0,r.jsx)(n.code,{children:"client.mac"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," MAC address of the client."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"}

1)," ",(0,r.jsx)(n.code,{children:"00-00-5E-00-53-23"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-nat-ip","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientnatip",children:(0,r.jsx)(n.code,{children:"client.nat.ip"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"ip"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Client NAT ip address"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-nat-port","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientnatport",children:(0,r.jsx)(n.code,{children:"client.nat.port"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"long"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Client NAT port"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-packets","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientpackets",children:(0,r.jsx)(n.code,{children:"client.packets"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"long"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Packets sent from the client to the server."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"12"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-port","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientport",children:(0,r.jsx)(n.code,{children:"client.port"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"long"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Port of the client."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-registered-domain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientregistered_domain",children:(0,r.jsx)(n.code,{children:"client.registered_domain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," The highest registered client domain, stripped of the subdomain."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"example.com"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-subdomain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientsubdomain",children:(0,r.jsx)(n.code,{children:"client.subdomain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," The subdomain of the domain."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"east"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-top-level-domain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clienttop_level_domain",children:(0,r.jsx)(n.code,{children:"client.top_level_domain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," The effective top level domain (com, org, net, co.uk)."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"co.uk"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-domain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserdomain",children:(0,r.jsx)(n.code,{children:"client.user.domain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Name of the directory the user is a member of."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-email","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuseremail",children:(0,r.jsx)(n.code,{children:"client.user.email"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," User email address."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-full-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserfull_name",children:(0,r.jsx)(n.code,{children:"client.user.full_name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," User's full name, if available."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Albert Einstein"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-full-name-text","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserfull_nametext",children:(0,r.jsx)(n.code,{children:"client.user.full_name.text"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"match_only_text"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," User's full name, if available."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"Albert Einstein"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-group-domain","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientusergroupdomain",children:(0,r.jsx)(n.code,{children:"client.user.group.domain"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Name of the directory the group is a member of."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-group-id","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientusergroupid",children:(0,r.jsx)(n.code,{children:"client.user.group.id"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Unique identifier for the group on the system/platform."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-group-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientusergroupname",children:(0,r.jsx)(n.code,{children:"client.user.group.name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Name of the group."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-hash","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserhash",children:(0,r.jsx)(n.code,{children:"client.user.hash"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Unique user hash to correlate information for a user in anonymized form."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-id","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserid",children:(0,r.jsx)(n.code,{children:"client.user.id"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Unique identifier of the user."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"S-1-5-21-202424912787-2692429404-2351956786-1000"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-name","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientusername",children:(0,r.jsx)(n.code,{children:"client.user.name"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Short name or login of the user."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"a.einstein"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-name-text","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientusernametext",children:(0,r.jsx)(n.code,{children:"client.user.name.text"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"match_only_text"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," ",(0,r.jsx)(n.strong,{children:"Core"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Short name or login of the user."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:"a.einstein"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]}),"\n",(0,r.jsx)("a",{id:"client-user-roles","aria-hidden":"true"}),"\n",(0,r.jsx)(n.h3,{id:"clientuserroles",children:(0,r.jsx)(n.code,{children:"client.user.roles"})}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Type:"})," ",(0,r.jsx)(n.code,{children:"keyword"})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Level:"})," Extended"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Description:"})," Array of user roles at the time of the event."]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Example:"})," ",(0,r.jsx)(n.code,{children:'["kibana_admin", "reporting_user"]'})]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Normalization:"})," array"]}),"\n",(0,r.jsxs)(n.p,{children:[(0,r.jsx)(n.strong,{children:"Indexed:"})," true"]})]})}n.default=(0,d.j)({MDXContent:function(e={}){let{wrapper:n}=Object.assign({},(0,s.a)(),e.components);return n?(0,r.jsx)(n,{...e,children:(0,r.jsx)(o,{...e})}):o(e)},pageOpts:{filePath:"src/pages/ecs-field-reference/8.17/client.mdx",route:"/ecs-field-reference/8.17/client",frontMatter:{metaTitle:"Client Fields (38 fields) | Logit.io ECS Client Field Set Reference",description:"Complete reference for client fields in Logit.io ECS Schema (Elastic Common Schema). Includes 38 fields (19 core, 19 extended). Fields about the client ...",productVersion:"8.17",productName:"Logit.io ECS Schema"},title:"Client",headings:l},pageNextRoute:"/ecs-field-reference/8.17/client"})},34908:function(e,n,i){"use strict";i.d(n,{Z:function(){return d}});var r=i(67294);function d({structuredData:e=[],breadcrumbData:n,productVersion:i,productName:d,websiteArea:s,isLatestVersion:t=!0}){return(0,r.useEffect)(()=>{let r=document.head;if(Array.from(r.querySelectorAll('script[id^="ecs-structured-data-"]')).forEac

1h(e=>e.remove()),e.forEach((e,n)=>{let i=`ecs-structured-data-${n}`,d=document.createElement("script");d.id=i,d.type="application/ld+json",d.textContent=JSON.stringify(e),r.appendChild(d)}),n){let e="ecs-breadcrumb-data",i=document.getElementById(e);i&&i.remove();let d=document.createElement("script");d.id=e,d.type="application/ld+json",d.textContent=JSON.stringify(n),r.appendChild(d)}["product_version","product_name","website_area"].forEach(e=>{let n=document.getElementById(`ecs-meta-${e}`);n&&n.remove()});let t=(e,n,i=!1)=>{let d=`ecs-meta-${e}`,s=document.createElement("meta");s.id=d,i?s.setAttribute("property",e):s.setAttribute("name",e),s.setAttribute("content",n),r.appendChild(s)};return i&&t("product_version",i),d&&t("product_name",d),s&&t("website_area",s),()=>{Array.from(r.querySelectorAll('script[id^="ecs-structured-data-"]')).forEach(e=>e.remove());let e=document.getElementById("ecs-breadcrumb-data");e&&e.remove(),["product_version","product_name","website_area"].forEach(e=>{let n=document.getElementById(`ecs-meta-${e}`);n&&n.remove()})}},[e,n,i,d,s,t]),null}},67904:function(e,n,i){"use strict";i.d(n,{Z:function(){return h}});var r=i(85893),d=i(67294),s=i(11163),t=i(41664),c=i.n(t),l=i(94364),o=i.n(l);function h({id:e,versions:n,currentVersion:i,fieldSetName:t=null,isLatest:l=!1}){let h=(0,s.useRouter)();(0,d.useEffect)(()=>{let n=document.getElementById(e);if(n){let e=e=>{let n=e.target;h.push(n.value)};return n.addEventListener("change",e),()=>{n.removeEventListener("change",e)}}},[e,h]);let x="/ecs-field-reference",j=n[0],a=t?`${x}/${t}`:`${x}/`;return(0,r.jsxs)(r.Fragment,{children:[!l&&(0,r.jsxs)("div",{className:o().alertBanner,children:[(0,r.jsx)("strong",{children:"⚠️ Outdated Version:"})," You are viewing ECS version"," ",i,", which is outdated."," ",(0,r.jsxs)(c(),{href:a,className:o().alertLink,children:["View the latest version (",j,")"]})]}),(0,r.jsxs)("div",{className:o().selectorContainer,children:[(0,r.jsx)("strong",{className:o().selectorLabel,children:"ECS Version:"})," ",(0,r.jsx)("select",{id:e,defaultValue:l?t?`${x}/${t}`:`${x}/`:t?`${x}/${i}/${t}`:`${x}/${i}/`,className:o().selectElement,children:n.map((e,n)=>{let i=0===n,d=i?t?`${x}/${t}`:`${x}/`:t?`${x}/${e}/${t}`:`${x}/${e}/`,s=i?`${e} (Latest)`:e;return(0,r.jsx)("option",{value:d,children:s},e)})})]})]})}},94364:function(e){e.exports={alertBanner:"ecs-version-selector_alertBanner__LPiH_",alertLink:"ecs-version-selector_alertLink__wQ26d",selectorContainer:"ecs-version-selector_selectorContainer__ZdR0e",selectorLabel:"ecs-version-selector_selectorLabel__7SICs",selectElement:"ecs-version-selector_selectElement__xtog5"}}},function(e){e.O(0,[31379,92888,49774,40179],function(){return e(e.s=40054)}),_N_E=e.O()}]);