runZero data dictionary
runZero discovers and catalogs the following fields from known protocols and services:
| Protocol | Attribute name | Data type | Single-value |
|---|---|---|---|
| acop | acop.cellID | string | true |
| acop | acop.channelID | string | true |
| acop | acop.clientID | string | true |
| acop | acop.controllerName | string | true |
| acop | acop.controllerSerial | string | true |
| acop | acop.controllerTime | string | true |
| acop | acop.controllerVersion | string | true |
| acop | acop.error | string | true |
| acop | acop.opVersion | string | true |
| acop | acop.rbuType | string | true |
| acop | acop.revision | string | true |
| acop | acop.stationID | string | true |
| acop | acop.stationName | string | true |
| acop | acop.supplierCode | string | true |
| acop | acop.supportLinking | numeric | true |
| acop | acop.supportSeqNum | numeric | true |
| acop | acop.systemSubtype | string | true |
| acop | acop.systemType | string | true |
| acop | acop.toolData | string | true |
| acop | acop.toolVersion | string | true |
| activemq | activemq.jvm.vendor | string | true |
| activemq | activemq.jvm.version | string | true |
| activemq | activemq.os | string | true |
| activemq | activemq.protocolVersion | string | true |
| activemq | activemq.wireformat.data | string | true |
| activemq | activemq.wireformat.version | string | true |
| adb | adb.access | string | true |
| ads | ads.deviceName | string | true |
| ads | ads.routeCount | numeric | true |
| ads | ads.routes | string | true |
| ads | ads.version | string | true |
| ads | ads.versionBuild | string | true |
| ads | ads.versionMajor | string | true |
| ads | ads.versionMinor | string | true |
| airplay | airplay.build | numeric | true |
| airplay | airplay.canRecordScreenStream | boolean | true |
| airplay | airplay.deviceID | string | true |
| airplay | airplay.features | numeric | true |
| airplay | airplay.featuresEx | string | true |
| airplay | airplay.firmwareBuildDate | string | true |
| airplay | airplay.firmwareRevision | numeric | true |
| airplay | airplay.hardwareRevision | numeric | true |
| airplay | airplay.hasUDPMirroringSupport | boolean | true |
| airplay | airplay.initialVolume | numeric | true |
| airplay | airplay.keepAliveLowPower | boolean | true |
| airplay | airplay.keepAliveSendStatsAsBody | boolean | true |
| airplay | airplay.macAddress | string | true |
| airplay | airplay.manufacturer | string | true |
| airplay | airplay.model | string | true |
| airplay | airplay.name | string | true |
| airplay | airplay.osBuildVersion | string | true |
| airplay | airplay.osinfo | string | true |
| airplay | airplay.pi | uuid | true |
| airplay | airplay.pk | string | true |
| airplay | airplay.playbackCapabilities | string | false |
| airplay | airplay.protocolVersion | numeric | true |
| airplay | airplay.ptpinfo | string | true |
| airplay | airplay.receiverHDRCapability | string | true |
| airplay | airplay.screenDemoMode | boolean | true |
| airplay | airplay.sdk | string | true |
| airplay | airplay.senderAddress | string | true |
| airplay | airplay.sourceVersion | numeric | true |
| airplay | airplay.statusFlags | string | true |
| airplay | airplay.supportedFormats | string | true |
| airplay | airplay.volumeControlType | numeric | true |
| airplay | airplay.vv | numeric | true |
| airplay | apache.serverInfo | string | true |
| amqp | amqp.capabilities | string | true |
| amqp | amqp.clusterName | string | true |
| amqp | amqp.copyright | string | true |
| amqp | amqp.frameType | string | true |
| amqp | amqp.information | string | true |
| amqp | amqp.locales | string | true |
| amqp | amqp.mechanisms | string | true |
| amqp | amqp.platform | string | true |
| amqp | amqp.product | string | true |
| amqp | amqp.protocolID | string | true |
| amqp | amqp.protocolMajor | string | true |
| amqp | amqp.protocolMinor | string | true |
| amqp | amqp.protocolRevision | string | true |
| amqp | amqp.protocolVersion | string | true |
| amqp | amqp.saslRequired | string | true |
| amqp | amqp.serverVersion | string | true |
| amqp | amqp.tlsRequired | string | true |
| amqp | amqp.version | string | true |
| amqp | amqp.versionMajor | string | true |
| amqp | amqp.versionMinor | string | true |
| anydesk | anydesk.certIssuer | string | true |
| anydesk | anydesk.certSubject | string | true |
| anydesk | anydesk.selfSigned | string | true |
| atg | atg.cpe | string | true |
| atg | atg.functionCode | string | true |
| atg | atg.modile | string | true |
| atg | atg.module | string | true |
| atg | atg.products | numeric | true |
| atg | atg.software | string | true |
| atg | atg.stationName | string | true |
| atg | atg.tankCount | numeric | true |
| atg | atg.version | string | true |
| bacnet | bacnet.address | string | true |
| bacnet | bacnet.bbmd | string | false |
| bacnet | bacnet.bbmdTable | string | true |
| bacnet | bacnet.databaseRevision | string | true |
| bacnet | bacnet.decodeWarning | string | false |
| bacnet | bacnet.deviceCount | numeric | true |
| bacnet | bacnet.deviceType | string | true |
| bacnet | bacnet.fdt | string | false |
| bacnet | bacnet.foreignDeviceRegistered | string | true |
| bacnet | bacnet.foreignDeviceTable | string | true |
| bacnet | bacnet.gateway | string | true |
| bacnet | bacnet.iHave | string | false |
| bacnet | bacnet.instance | string | true |
| bacnet | bacnet.instanceID | string | true |
| bacnet | bacnet.maxAPDU | string | true |
| bacnet | bacnet.maxApdu | string | true |
| bacnet | bacnet.maxApduLengthAccepted | string | true |
| bacnet | bacnet.modelName | string | true |
| bacnet | bacnet.network | string | true |
| bacnet | bacnet.objectCount | numeric | true |
| bacnet | bacnet.pid | string | false |
| bacnet | bacnet.port | numeric | true |
| bacnet | bacnet.profileName | string | true |
| bacnet | bacnet.protocolRevision | string | true |
| bacnet | bacnet.readFailure | string | false |
| bacnet | bacnet.remote | string | true |
| bacnet | bacnet.remoteDevice | string | false |
| bacnet | bacnet.remoteDeviceCount | numeric | true |
| bacnet | bacnet.route | string | true |
| bacnet | bacnet.routerNetwork | string | false |
| bacnet | bacnet.routerNetworks | string | true |
| bacnet | bacnet.routingEntries | string | true |
| bacnet | bacnet.routingEntry | string | false |
| bacnet | bacnet.segmentation | string | true |
| bacnet | bacnet.segmentationSupported | numeric | true |
| bacnet | bacnet.serialNumber | string | true |
| bacnet | bacnet.systemStatus | string | true |
| bacnet | bacnet.target | string | true |
| bacnet | bacnet.vendorID | string | true |
| bacnet | bacnet.vendorIDLookup | string | true |
| bacnet | bacnet.vendorLookup | string | true |
| banner | banner.banner | string | true |
| banner | banner.binary | string | true |
| banner | banner.entropy | string | true |
| banner | banner.hexPrefix | string | true |
| banner | banner.length | numeric | true |
| banner | banner.lines | string | true |
| banner | banner.printable | string | true |
| banner | banner.truncated | string | true |
| bedrock | bedrock.contents | string | true |
| bedrock | bedrock.guid | string | true |
| bedrock | bedrock.uptime | string | true |
| bgp | bgp.addressFamilies | string | true |
| bgp | bgp.asn | string | true |
| bgp | bgp.asn32 | string | true |
| bgp | bgp.bgpID | string | true |
| bgp | bgp.capabilities | string | true |
| bgp | bgp.capabilityCount | numeric | true |
| bgp | bgp.error | string | true |
| bgp | bgp.holdTime | string | true |
| bgp | bgp.identifier | string | true |
| bgp | bgp.messageType | string | true |
| bgp | bgp.notificationCode | string | true |
| bgp | bgp.notificationCodeID | string | true |
| bgp | bgp.notificationSubcode | string | true |
| bgp | bgp.notificationSubcodeName | string | true |
| bgp | bgp.subCode | string | true |
| bgp | bgp.version | string | true |
| bitdefender-app | bitdefender.deviceID | string | true |
| bitdefender-app | bitdefender.hostname | string | true |
| bitdefender-app | bitdefender.model | string | true |
| bitdefender-app | bitdefender.os | string | true |
| bitdefender-app | bitdefender.type | string | true |
| bitdefender-app | service.product | string | true |
| bitdefender-app | service.vendor | string | true |
| bitdefender-app | service.version | string | true |
| bjnp | bjnp.ipv4 | string | true |
| bjnp | bjnp.ipv6 | string | true |
| bjnp | bjnp.macAddress | string | true |
| bjnp | bjnp.type | string | true |
| brother | brother.firmware.version | string | true |
| brother | brother.hostname | string | true |
| brother | brother.ip | string | true |
| brother | brother.mainFirmwareVersion | string | true |
| brother | brother.modelName | string | true |
| brother | brother.scanner | string | true |
| brother | brother.serialNbr | string | true |
| brother | brother.sub1FirmwareVersion | string | true |
| brother | brother.sub3FirmwareVersion | string | true |
| cacti | cacti.version | string | true |
| cassandra | cassandra.cluster | string | true |
| cassandra | cassandra.compression | string | true |
| cassandra | cassandra.confidence | string | true |
| cassandra | cassandra.cqlVersion | string | true |
| cassandra | cassandra.protocolVersions | string | true |
| cassandra | cassandra.version | string | true |
| cdp | cdp.addresses | string | true |
| cdp | cdp.capabilities | string | true |
| cdp | cdp.checksum | string | true |
| cdp | cdp.deviceID | string | true |
| cdp | cdp.isHost | string | true |
| cdp | cdp.isIGMPCapable | string | true |
| cdp | cdp.isL2Switch | string | true |
| cdp | cdp.isL3Router | string | true |
| cdp | cdp.isRepeater | string | true |
| cdp | cdp.isSourceRouteBridge | string | true |
| cdp | cdp.isTransparentBridge | string | true |
| cdp | cdp.mgmtAddresses | string | true |
| cdp | cdp.nativeVLAN | string | true |
| cdp | cdp.osVersion | string | true |
| cdp | cdp.platform | string | true |
| cdp | cdp.port | numeric | true |
| cdp | cdp.portID | numeric | true |
| cdp | cdp.powerConsumption | string | true |
| cdp | cdp.sysName | string | true |
| cdp | cdp.target | string | true |
| cdp | cdp.ttl | string | true |
| cdp | cdp.version | string | true |
| cdp | cdp.voipVLAN | string | true |
| chargen | chargen.osGuess | string | true |
| checkmk | banner | string | true |
| checkmk | checkmk.agentOS | string | true |
| checkmk | checkmk.arch | string | true |
| checkmk | checkmk.buildDate | string | true |
| checkmk | checkmk.hostname | string | true |
| checkmk | checkmk.osName | string | true |
| checkmk | checkmk.osType | string | true |
| checkmk | checkmk.osVersion | string | true |
| checkmk | checkmk.version | string | true |
| chromecast | chromecast.buildVersion | numeric | true |
| chromecast | chromecast.capabilities | string | true |
| chromecast | chromecast.castBuildRevision | string | true |
| chromecast | chromecast.connected | bool | true |
| chromecast | chromecast.ethernetConnected | bool | true |
| chromecast | chromecast.generation | numeric | true |
| chromecast | chromecast.hasUpdate | bool | true |
| chromecast | chromecast.hotspotBssid | string | true |
| chromecast | chromecast.ipAddress | string | true |
| chromecast | chromecast.locale | string | true |
| chromecast | chromecast.location.countryCode | string | true |
| chromecast | chromecast.location.latitude | numeric | true |
| chromecast | chromecast.location.longitude | numeric | true |
| chromecast | chromecast.macAddress | string | true |
| chromecast | chromecast.name | string | true |
| chromecast | chromecast.optIn.crash | bool | true |
| chromecast | chromecast.optIn.opencast | bool | true |
| chromecast | chromecast.optIn.stats | bool | true |
| chromecast | chromecast.publicKey | string | true |
| chromecast | chromecast.releaseTrack | string | true |
| chromecast | chromecast.setupState | numeric | true |
| chromecast | chromecast.setupStats.historicallySucceeded | bool | true |
| chromecast | chromecast.setupStats.numCheckConnectivity | numeric | true |
| chromecast | chromecast.setupStats.numConnectWifi | numeric | true |
| chromecast | chromecast.setupStats.numConnectedWifiNotSaved | numeric | true |
| chromecast | chromecast.setupStats.numInitialEurekaInfo | numeric | true |
| chromecast | chromecast.setupStats.numObtainIpnumeric | true | false |
| chromecast | chromecast.ssdpUdn | string | true |
| chromecast | chromecast.ssid | string | true |
| chromecast | chromecast.timeFormat | numeric | true |
| chromecast | chromecast.timezone | string | true |
| chromecast | chromecast.tosAccepted | bool | true |
| chromecast | chromecast.umaClientId | string | true |
| chromecast | chromecast.uptime | numeric | true |
| chromecast | chromecast.version | numeric | true |
| chromecast | chromecast.wpaConfigured | bool | true |
| chromecast | chromecast.wpaId | numeric | true |
| chromecast | chromecast.wpaState | numeric | true |
| cip | cip.address | string | true |
| cip | cip.backplaneSlot | string | true |
| cip | cip.deviceType | string | true |
| cip | cip.deviceTypeID | string | true |
| cip | cip.discoveredPorts | numeric | true |
| cip | cip.ethernetLinkCount | numeric | true |
| cip | cip.gateway | string | true |
| cip | cip.gateway.ethernetLinkCount | numeric | true |
| cip | cip.gateway.ips | string | true |
| cip | cip.gateway.macs | string | true |
| cip | cip.gateway.tcpipInterfaceCount | numeric | true |
| cip | cip.id | string | true |
| cip | cip.identityPort | numeric | true |
| cip | cip.ips | string | true |
| cip | cip.macPairs | string | true |
| cip | cip.macs | string | true |
| cip | cip.moduleCount | numeric | true |
| cip | cip.moduleStatus | string | true |
| cip | cip.modules | string | false |
| cip | cip.port | numeric | true |
| cip | cip.product | string | true |
| cip | cip.productCode | string | true |
| cip | cip.productCodeName | string | true |
| cip | cip.productID | string | true |
| cip | cip.productName | string | true |
| cip | cip.revision | string | true |
| cip | cip.safetySupervisor | string | true |
| cip | cip.serialNumber | string | true |
| cip | cip.serialNumberHex | string | true |
| cip | cip.slotStatus | string | true |
| cip | cip.state | string | true |
| cip | cip.stateCode | string | true |
| cip | cip.status | string | true |
| cip | cip.statusCode | string | true |
| cip | cip.supportsCommunicationService | numeric | true |
| cip | cip.supportsTCPEncapsulation | numeric | true |
| cip | cip.supportsUDPEncapsulation | numeric | true |
| cip | cip.target | string | true |
| cip | cip.tcpipInterfaceCount | numeric | true |
| cip | cip.vendor | string | true |
| cip | cip.vendorID | string | true |
| cisco-phone | ciscocp.apploadid | string | true |
| cisco-phone | ciscocp.bootloadid | string | true |
| cisco-phone | ciscocp.hostname | string | true |
| cisco-phone | ciscocp.mac | string | true |
| cisco-phone | ciscocp.messagewaiting | string | true |
| cisco-phone | ciscocp.model | string | true |
| cisco-phone | ciscocp.phonedn | string | true |
| cisco-phone | ciscocp.revision | string | true |
| cisco-phone | ciscocp.serial | string | true |
| cisco-phone | ciscocp.series | string | true |
| cisco-phone | ciscocp.udi | string | true |
| cisco-phone | ciscocp.version | string | true |
| ciscosmi | ciscosmi.reply | string | true |
| citrixica | citrix.applications | string | true |
| citrixica | citrix.raw | string | true |
| citrixica | citrix.serverFarm | string | true |
| citrixica | citrixica.banner | string | true |
| citrixica | citrixica.cpe23 | string | true |
| citrixica | citrixica.detected | boolean | true |
| citrixica | citrixica.doubleHeader | string | true |
| citrixica | citrixica.hexPrefix | string | true |
| citrixica | citrixica.length | numeric | true |
| citrixica | citrixica.port | numeric | true |
| citrixica | citrixica.signature | string | true |
| citrixica | citrixica.signatureRepeats | numeric | true |
| citrixica | citrixica.target | string | true |
| citrixica | citrixica.truncated | string | true |
| coap | coap.contentFormat | string | true |
| coap | coap.contentUnknown | string | true |
| coap | coap.encodedPayload | string | true |
| coap | coap.jsonData.cid | string | true |
| coap | coap.jsonData.name | string | true |
| coap | coap.jsonData.type | string | true |
| coap | coap.messageID | string | true |
| coap | coap.options | string | true |
| coap | coap.payload | string | true |
| coap | coap.resources | string | true |
| coap | coap.responseCode | string | true |
| coap | coap.token | string | true |
| coap | coap.type | string | true |
| coap | coap.version | string | true |
| cockpit | cockpit.os | string | true |
| cockpit | cockpit.variant | string | true |
| cockpit | cockpit.variantID | string | true |
| cockpit | host.name | string | false |
| codesys | codesys.banner | string | true |
| codesys | codesys.cpe23 | string | true |
| codesys | codesys.format | string | true |
| codesys | codesys.osName | string | true |
| codesys | codesys.osType | string | true |
| codesys | codesys.productType | string | true |
| codesys | codesys.version | string | true |
| codesys2 | codesys2.byteOrder | string | true |
| codesys2 | codesys2.osType | string | true |
| codesys2 | codesys2.osVersion | string | true |
| codesys2 | codesys2.vendor | string | true |
| comtrol | dnsServer | string | true |
| comtrol | gateway | string | true |
| comtrol | hostname | string | true |
| comtrol | ipAddress | string | true |
| comtrol | macAddress | string | true |
| comtrol | manufacturer | string | true |
| comtrol | modelName | string | true |
| comtrol | modelNumber | string | true |
| comtrol | netmask | string | true |
| comtrol | osVersion | string | true |
| comtrol | serialNumber | string | true |
| confluence | confluence.baseURL | string | true |
| confluence | confluence.build | string | true |
| confluence | confluence.version | string | true |
| consul | consul.config.version | string | true |
| couchdb | couchdb.version | string | true |
| crestron | crestron.banner | string | true |
| crestron | crestron.buildDate | string | true |
| crestron | crestron.hostname | string | true |
| crestron | crestron.id | string | true |
| crestron | crestron.mac | string | true |
| crestron | crestron.model | string | true |
| crestron | crestron.version | string | true |
| crimsonv3 | crimsonv3.manufacturer | string | true |
| crimsonv3 | crimsonv3.model | string | true |
| crowd | crowd.version | string | true |
| crowd | service.product | string | true |
| crowd | service.vendor | string | true |
| crowd | service.version | string | true |
| daytime | daytime.osGuess | string | true |
| daytime | daytime.timestamp | string | true |
| db2 | db2.database | string | true |
| db2 | db2.extnam | string | true |
| db2 | db2.hostname | string | true |
| db2 | db2.instance | string | true |
| db2 | db2.nodeName | string | true |
| db2 | db2.port | numeric | true |
| db2 | db2.raw | string | true |
| db2 | db2.serverType | string | true |
| db2 | db2.serviceName | string | true |
| db2 | db2.srvnam | string | true |
| db2 | db2.srvrlslv | string | true |
| db2 | db2.version | string | true |
| dcerpc | dcerpc.accepted | string | true |
| dcerpc | dcerpc.acceptedContexts | numeric | true |
| dcerpc | dcerpc.assocGroup | string | true |
| dcerpc | dcerpc.authLength | string | true |
| dcerpc | dcerpc.byteOrder | string | true |
| dcerpc | dcerpc.callID | string | true |
| dcerpc | dcerpc.dataRep | string | true |
| dcerpc | dcerpc.fragLength | string | true |
| dcerpc | dcerpc.interface | string | true |
| dcerpc | dcerpc.interfaceUUID | string | true |
| dcerpc | dcerpc.interfaceVersion | string | true |
| dcerpc | dcerpc.maxRecvFrag | string | true |
| dcerpc | dcerpc.maxXmitFrag | string | true |
| dcerpc | dcerpc.oxid.addresses | string | true |
| dcerpc | dcerpc.oxid.bindingCount | numeric | true |
| dcerpc | dcerpc.oxid.bindings | string | true |
| dcerpc | dcerpc.oxid.comVersion | string | true |
| dcerpc | dcerpc.oxid.error | string | true |
| dcerpc | dcerpc.oxid.machineName | string | true |
| dcerpc | dcerpc.oxid.security | string | true |
| dcerpc | dcerpc.pduType | string | true |
| dcerpc | dcerpc.port | numeric | true |
| dcerpc | dcerpc.rejectReason | string | true |
| dcerpc | dcerpc.rejectReasonCode | string | true |
| dcerpc | dcerpc.rejectedContexts | numeric | true |
| dcerpc | dcerpc.secondaryAddr | string | true |
| dcerpc | dcerpc.serviceCount | numeric | true |
| dcerpc | dcerpc.services | string | true |
| dcerpc | dcerpc.target | string | true |
| dcerpc | dcerpc.version | string | true |
| dcerpc | epm.addrLen | numeric | true |
| dcerpc | epm.address | string | true |
| dcerpc | epm.assocGroup | string | true |
| dcerpc | epm.authRequired | string | true |
| dcerpc | epm.dataRep | string | true |
| dcerpc | epm.maxRecvFrag | numeric | true |
| dcerpc | epm.maxSendFrag | numeric | true |
| dcerpc | epm.oxid.addresses | string | true |
| dcerpc | epm.oxid.security | string | true |
| dcerpc | epm.oxidVersion | string | true |
| dcerpc | epm.version | string | true |
| dhcp | dhcp.authentication | string | true |
| dhcp | dhcp.bootFile | string | true |
| dhcp | dhcp.broadcast | string | true |
| dhcp | dhcp.broadcastAddress | string | true |
| dhcp | dhcp.class | string | false |
| dhcp | dhcp.clientFqdn | string | true |
| dhcp | dhcp.clientIP | string | true |
| dhcp | dhcp.clientMAC | string | true |
| dhcp | dhcp.clientSystemArchitecture | string | false |
| dhcp | dhcp.clientSystemArchitectureCode | string | true |
| dhcp | dhcp.clientid.enterprise | string | false |
| dhcp | dhcp.domainName | string | true |
| dhcp | dhcp.domainNameServer | string | true |
| dhcp | dhcp.flags | string | true |
| dhcp | dhcp.hardwareAddressLength | string | true |
| dhcp | dhcp.hardwareType | string | true |
| dhcp | dhcp.hops | string | true |
| dhcp | dhcp.hostname | string | true |
| dhcp | dhcp.isRequest | string | true |
| dhcp | dhcp.leaseTime | string | true |
| dhcp | dhcp.leaseTimeFormatted | string | true |
| dhcp | dhcp.maximumMessageSize | string | true |
| dhcp | dhcp.message | string | true |
| dhcp | dhcp.messageType | string | true |
| dhcp | dhcp.messageTypeCode | string | true |
| dhcp | dhcp.nextServerIP | string | true |
| dhcp | dhcp.ntpServers | string | true |
| dhcp | dhcp.offeredIP | string | true |
| dhcp | dhcp.op | string | true |
| dhcp | dhcp.port | numeric | true |
| dhcp | dhcp.rebindingTime | string | true |
| dhcp | dhcp.rebindingTimeFormatted | string | true |
| dhcp | dhcp.relayAgentIP | string | true |
| dhcp | dhcp.relayAgentInformation | string | true |
| dhcp | dhcp.renewalTime | string | true |
| dhcp | dhcp.renewalTimeFormatted | string | true |
| dhcp | dhcp.router | string | true |
| dhcp | dhcp.seconds | string | true |
| dhcp | dhcp.serverIdentifier | string | true |
| dhcp | dhcp.serverName | string | true |
| dhcp | dhcp.subnetMask | string | true |
| dhcp | dhcp.target | string | true |
| dhcp | dhcp.tftpServerAddress | string | true |
| dhcp | dhcp.tftpServerName | string | true |
| dhcp | dhcp.transactionID | string | true |
| dhcp | dhcp.vendorClass | string | true |
| dhip | dhip.alarmInputChannels | string | true |
| dhip | dhip.alarmOutputChannels | string | true |
| dhip | dhip.deviceClass | string | true |
| dhip | dhip.deviceType | string | true |
| dhip | dhip.find | string | true |
| dhip | dhip.httpPort | string | true |
| dhip | dhip.init | string | true |
| dhip | dhip.ipv4.address | string | true |
| dhip | dhip.ipv4.dhcp | string | true |
| dhip | dhip.ipv4.gateway | string | true |
| dhip | dhip.ipv4.netmask | string | true |
| dhip | dhip.ipv6.address | string | true |
| dhip | dhip.ipv6.dhcp | string | true |
| dhip | dhip.ipv6.gateway | string | true |
| dhip | dhip.ipv6.linkLocalAddress | string | true |
| dhip | dhip.mac | string | true |
| dhip | dhip.machineName | string | true |
| dhip | dhip.manufacturer | string | true |
| dhip | dhip.method | string | true |
| dhip | dhip.port | string | true |
| dhip | dhip.remoteVideoInputChannels | string | true |
| dhip | dhip.serialNo | string | true |
| dhip | dhip.vendor | string | true |
| dhip | dhip.version | string | true |
| dhip | dhip.videoInputChannels | string | true |
| dhip | dhip.videoOutputChannels | string | true |
| diameter | diameter.cpe | string | true |
| diameter | diameter.example.com | string | true |
| diameter | diameter.firmwareRevision | string | true |
| diameter | diameter.originHost | string | true |
| diameter | diameter.originRealm | string | true |
| diameter | diameter.productName | string | true |
| diameter | diameter.resultCode | string | true |
| diameter | diameter.vendor | string | true |
| diameter | diameter.vendorID | string | true |
| diametersctp | diameter.cpe | string | true |
| diametersctp | diameter.firmwareRevision | string | true |
| diametersctp | diameter.originHost | string | true |
| diametersctp | diameter.originRealm | string | true |
| diametersctp | diameter.productName | string | true |
| diametersctp | diameter.vendor | string | true |
| diametersctp | diameter.vendorID | string | true |
| dnp3 | dnp3.destination | string | true |
| dnp3 | dnp3.deviceID | string | true |
| dnp3 | dnp3.deviceName | string | true |
| dnp3 | dnp3.hardwareVersion | string | true |
| dnp3 | dnp3.location | string | true |
| dnp3 | dnp3.manufacturer | string | true |
| dnp3 | dnp3.model | string | true |
| dnp3 | dnp3.owner | string | true |
| dnp3 | dnp3.serialNumber | string | true |
| dnp3 | dnp3.softwareVersion | string | true |
| dnp3 | dnp3.source | string | true |
| dns | dns.addrs | string | true |
| dns | dns.ancount | numeric | true |
| dns | dns.answerAddrs | string | true |
| dns | dns.answerNames | string | true |
| dns | dns.answerTXTs | string | true |
| dns | dns.answerTypes | string | true |
| dns | dns.authors.bind | string | true |
| dns | dns.edns0 | string | true |
| dns | dns.edns0.cookie | string | true |
| dns | dns.edns0.nsid | string | true |
| dns | dns.edns0.subnet | string | true |
| dns | dns.edns0.udpSize | string | true |
| dns | dns.edns0.unknown | string | true |
| dns | dns.edns0.version | string | true |
| dns | dns.flags | string | true |
| dns | dns.hostname.bind | string | true |
| dns | dns.hostnameBind | string | true |
| dns | dns.id | string | true |
| dns | dns.id.server | string | true |
| dns | dns.idServer | string | true |
| dns | dns.isRequest | string | true |
| dns | dns.meraki | string | true |
| dns | dns.opcode | string | true |
| dns | dns.ptr | string | false |
| dns | dns.qdcount | numeric | true |
| dns | dns.rcode | string | true |
| dns | dns.recursion | string | true |
| dns | dns.resolvers | string | true |
| dns | dns.resolves | string | true |
| dns | dns.rtts | numeric | true |
| dns | dns.subnets | numeric | true |
| dns | dns.telco.epc | string | false |
| dns | dns.tracer | string | false |
| dns | dns.tracer.edns0 | string | false |
| dns | dns.transport | string | true |
| dns | dns.version | string | true |
| dns | dns.version.bind | string | true |
| dns | dns.version.server | string | true |
| dns | dns.versionBind | string | true |
| docker | docker.architecture | string | true |
| docker | docker.dockerRootDir | string | true |
| docker | docker.kernelVersion | string | true |
| docker | docker.memTotal | string | true |
| docker | docker.name | string | true |
| docker | docker.ncpu | string | true |
| docker | docker.operatingSystem | string | true |
| docker | docker.ostype | string | true |
| docker | docker.systemTime | string | true |
| docker | docker.version | string | true |
| dtls | dtls.alert | string | true |
| dtls | dtls.contentType | string | true |
| dtls | dtls.cookieLength | string | true |
| dtls | dtls.encapsulation | string | true |
| dtls | dtls.handshakeFragmentLength | string | true |
| dtls | dtls.handshakeFragmentOffset | string | true |
| dtls | dtls.handshakeLength | string | true |
| dtls | dtls.handshakeMessageSeq | string | true |
| dtls | dtls.handshakeType | string | true |
| dtls | dtls.recordEpoch | string | true |
| dtls | dtls.recordLength | string | true |
| dtls | dtls.recordSequence | string | true |
| dtls | dtls.serverVersion | string | true |
| dtls | dtls.unknown | string | true |
| dtls | dtls.verifyCookie | string | true |
| dtls | dtls.version | string | true |
| echo | echo.data | string | true |
| echo | echo.match | string | true |
| echo | echo.probeHex | string | true |
| echo | echo.probeLength | string | true |
| echo | echo.responseHex | string | true |
| echo | echo.responseLength | string | true |
| elasticsearch | elasticsearch.version.number | string | true |
| epo | epo.guid | string | true |
| epo | epo.hostname | string | true |
| epo | epo.server | string | true |
| epo | epo.version | string | true |
| epo | mcafeeAgent.hostname | string | true |
| epo | mcafeeAgent.version | string | true |
| erlangdp | epmd.details | string | false |
| erlangdp | epmd.names | string | false |
| erlangdp | erldp.challenge | string | true |
| erlangdp | erldp.flags | string | true |
| erlangdp | erldp.hostname | string | true |
| erlangdp | erldp.node | string | true |
| erlangdp | erldp.status | string | true |
| erlangdp | erldp.version | string | true |
| etcd2 | etcd2.access | string | true |
| etcd2 | etcd2.keys | string | true |
| ethercat | ethercat.ado | string | true |
| ethercat | ethercat.adp | string | true |
| ethercat | ethercat.command | string | true |
| ethercat | ethercat.commandType | string | true |
| ethercat | ethercat.datagramCount | numeric | true |
| ethercat | ethercat.detected | boolean | true |
| ethercat | ethercat.index | string | true |
| ethercat | ethercat.workingCounter | numeric | true |
| fgfm | fgfm.deviceName | string | true |
| fgfm | fgfm.firmwareVersion | string | true |
| fgfm | fgfm.mgmtIP | string | true |
| fgfm | fgfm.platform | string | true |
| fgfm | fgfm.serialNumber | string | true |
| firebird | firebird.opcode | string | true |
| firebird | firebird.protocolVersion | string | true |
| firebird | firebird.version | string | true |
| fox | fox.appName | string | true |
| fox | fox.appVersion | string | true |
| fox | fox.authAgent | string | true |
| fox | fox.brandId | string | true |
| fox | fox.cpe | string | true |
| fox | fox.hostAddress | string | true |
| fox | fox.hostId | string | true |
| fox | fox.hostname | string | true |
| fox | fox.language | string | true |
| fox | fox.osName | string | true |
| fox | fox.osVersion | string | true |
| fox | fox.stationName | string | true |
| fox | fox.sysInfo | string | true |
| fox | fox.timeZone | string | true |
| fox | fox.vendor | string | true |
| fox | fox.version | string | true |
| fox | fox.vmName | string | true |
| fox | fox.vmUuid | string | true |
| fox | fox.vmVersion | string | true |
| ftp | ftp.anonymousAllowed | string | true |
| ftp | ftp.anonymousLoginCode | string | true |
| ftp | ftp.authMethods | string | true |
| ftp | ftp.banner | string | true |
| ftp | ftp.featureCount | numeric | true |
| ftp | ftp.features | string | true |
| ftp | ftp.statusCode | string | true |
| ftp | ftp.statusMessage | string | true |
| ftp | ftp.supportsExplicitTLS | numeric | true |
| ftp | ftp.system | string | true |
| ftp | ftp.systemStatusCode | string | true |
| ftp | ftp.systemType | string | true |
| gesrtp | gesrtp.cpe | string | true |
| gesrtp | gesrtp.deviceIndicator | string | true |
| gesrtp | gesrtp.plcName | string | true |
| git | git.branches | string | true |
| git | git.capabilities | string | true |
| git | git.headRef | string | true |
| git | git.protocolVersion | string | true |
| git | git.refs | string | true |
| git | git.serverSoftware | string | true |
| git | git.tags | string | true |
| git-http | gitlab.manifest.hash | string | true |
| googlewifi | googleWifi.software.version | string | true |
| googlewifi | googleWifi.system.countryCode | string | true |
| googlewifi | googleWifi.system.hardwareID | string | true |
| googlewifi | googleWifi.system.modelID | string | true |
| googlewifi | googleWifi.wan.gateway | string | true |
| googlewifi | googleWifi.wan.localIP | string | true |
| gtpc | gtpc.restartCounter | numeric | true |
| gtpc | gtpc.teid | string | true |
| gtpc | gtpc.teidPresent | string | true |
| gtpc | gtpc.version | string | true |
| gtpprime | gtpprime.detected | boolean | true |
| gtpprime | gtpprime.pt | string | true |
| gtpprime | gtpprime.restartCounter | numeric | true |
| gtpprime | gtpprime.teid | string | true |
| gtpprime | gtpprime.version | string | true |
| gtpu | gtpu.detected | boolean | true |
| gtpu | gtpu.pt | string | true |
| gtpu | gtpu.restartCounter | numeric | true |
| gtpu | gtpu.sequenceNumber | string | true |
| gtpu | gtpu.teid | string | true |
| gtpu | gtpu.version | string | true |
| h323 | h323.causeCode | string | true |
| h323 | h323.causeDescription | string | true |
| h323 | h323.messageType | string | true |
| h323 | h323.product | string | true |
| h323 | h323.vendor | string | true |
| h323 | h323.version | string | true |
| hartip | hartip.inactivityTimeout | string | true |
| hartip | hartip.masterType | string | true |
| hartip | hartip.messageType | string | true |
| hartip | hartip.status | string | true |
| hartip | hartip.statusDescription | string | true |
| hartip | hartip.transactionID | string | true |
| hartip | hartip.version | string | true |
| hiddiscoveryd | hiddiscoveryd.address | string | true |
| hiddiscoveryd | hiddiscoveryd.hostname | string | true |
| hiddiscoveryd | hiddiscoveryd.mac | string | true |
| hiddiscoveryd | hiddiscoveryd.model | string | true |
| hiddiscoveryd | hiddiscoveryd.unpatchedVertXploit | string | true |
| hiddiscoveryd | hiddiscoveryd.version | string | true |
| hiddiscoveryd | hiddiscoveryd.versionDate | string | true |
| hikvision | hikvision.codebase.lastModified | string | true |
| hikvision | hikvision.codebase.platform | string | true |
| hikvision | hikvision.codebase.plugins | string | false |
| hikvision | hikvision.deviceCode | string | true |
| hikvision | hikvision.deviceType | string | true |
| hikvision | hikvision.firmwareVersion | string | true |
| hikvision | hikvision.firmwareVersionEmbedded | string | true |
| hikvision | hikvision.loginPageLastModified | string | true |
| hikvision | hikvision.modelFamily | string | true |
| hikvision | hikvision.pluginVersion | string | true |
| hikvision | hikvision.realm | string | true |
| hikvision | hikvision.webVersion | string | true |
| http | html.copyright | string | true |
| http | html.favicon | string | true |
| http | html.generator | string | true |
| http | html.title | string | true |
| http | http.body | numeric | true |
| http | http.body.mmh3 | string | true |
| http | http.code | numeric | true |
| http | http.contentLength | string | true |
| http | http.contentType | string | true |
| http | http.head.acceptRanges | string | true |
| http | http.head.cacheControl | string | true |
| http | http.head.contentLength | numeric | true |
| http | http.head.contentSecurityPolicy | string | true |
| http | http.head.contentType | string | true |
| http | http.head.cookieNames | string | true |
| http | http.head.date | string | true |
| http | http.head.etag | string | true |
| http | http.head.expires | string | true |
| http | http.head.faviconPath | string | true |
| http | http.head.lastModified | string | true |
| http | http.head.location | string | true |
| http | http.head.microsoftsharepointteamservices | string | true |
| http | http.head.server | string | true |
| http | http.head.setCookie | string | true |
| http | http.head.spiislatency | string | true |
| http | http.head.vary | string | true |
| http | http.head.wwwAuthenticate | string | true |
| http | http.head.xConfluenceRequestTime | string | true |
| http | http.head.xInfluxdbBuild | string | true |
| http | http.head.xInfluxdbVersion | string | true |
| http | http.head.xJenkins | string | true |
| http | http.head.xNtnxEnv | string | true |
| http | http.head.xOracleDmsEcid | string | true |
| http | http.head.xOracleDmsRid | string | true |
| http | http.head.xPoweredBy | string | true |
| http | http.head.xSharepointhealthscore | string | true |
| http | http.head.xconfluencerequesttime | string | true |
| http | http.head.xframeoptions | string | true |
| http | http.location | string | true |
| http | http.message | string | true |
| http | http.method | string | true |
| http | http.ntlm.challenge | string | true |
| http | http.ntlm.path | string | true |
| http | http.owa.version | string | true |
| http | http.owa.version.full | string | true |
| http | http.path | string | true |
| http | http.port | numeric | true |
| http | http.server | string | true |
| http | http.setCookie | string | true |
| http | http.sonicwall.hardware | string | true |
| http | http.sonicwall.softwareVersion | string | true |
| http | http.status | string | true |
| http | http.statusCode | string | true |
| http | http.target | string | true |
| http | http.technologies | string | true |
| http | http.title | string | true |
| http | http.uri | string | true |
| http | http.url | string | true |
| http | http.version | string | true |
| http | http.vmware.thumbprint | string | true |
| http | http.vmware.username | string | true |
| http | landesk.configPath | string | true |
| http | landesk.providerVersion | string | true |
| http | landesk.serverVersion | string | true |
| iax2 | iax2.destCallNumber | string | true |
| iax2 | iax2.detected | boolean | true |
| iax2 | iax2.iseqno | string | true |
| iax2 | iax2.oseqno | string | true |
| iax2 | iax2.response | string | true |
| iax2 | iax2.sourceCallNumber | string | true |
| iax2 | iax2.subclass | string | true |
| iax2 | iax2.subclassName | string | true |
| iax2 | iax2.ts | numeric | true |
| icmp | icmp.addrs | string | true |
| icmp | icmp.rtts | string | true |
| icmp | icmp.typeCode | string | true |
| icmp | icmp.typeCodeN | string | true |
| icmp | icmp6.addrs | string | true |
| icmp | icmp6.rtts | string | true |
| icmp | ip.tos | string | false |
| icmp | ip.ttl | string | false |
| ident | ident.error | string | true |
| ident | ident.opSys | string | true |
| ident | ident.osGuess | string | true |
| ident | ident.username | string | true |
| idrac | idrac.adEnabled | boolean | true |
| idrac | idrac.fwVersion | string | true |
| idrac | idrac.gui.titleBar | string | true |
| idrac | idrac.hostname | string | true |
| idrac | idrac.isOEMBranded | boolean | true |
| idrac | idrac.license | string | true |
| idrac | idrac.name | string | true |
| idrac | idrac.oem.hostname | string | true |
| idrac | idrac.serverGen | string | true |
| idrac | idrac.ssoEnabled | boolean | true |
| idrac | idrac.status | string | true |
| idrac | idrac.sysDesc | string | true |
| idrac | idrac.systemLockdown | string | true |
| idrac | idrac.systemModelName | string | true |
| idrac | idrac.tfaEnabled | boolean | true |
| idrac | idrac.version | string | true |
| idrac | service.product | string | true |
| idrac | service.vendor | string | true |
| idrac | service.version | string | true |
| iec104 | iec104.asduCOT | string | true |
| iec104 | iec104.asduCommonAddr | string | true |
| iec104 | iec104.asduCommonAddrs | string | true |
| iec104 | iec104.asduInfoObjAddr | string | true |
| iec104 | iec104.asduNegative | string | true |
| iec104 | iec104.asduTest | string | true |
| iec104 | iec104.asduTypes | string | true |
| iec104 | iec104.command | string | true |
| iec104 | iec104.commands | string | true |
| iec104 | iec104.frameCount | numeric | true |
| iec104 | iec104.frameType | string | true |
| iec104 | iec104.frameTypes | string | true |
| iec104 | iec104.initCause | string | true |
| iec104 | iec104.initLocalFlag | string | true |
| iec104 | iec104.startDTConfirmed | string | true |
| iec104 | iec104.testFRConfirmed | string | true |
| igel-discovery | igel.firmwareVersion | string | true |
| igel-discovery | igel.hostname | string | true |
| igel-discovery | igel.ipAddress | string | true |
| igel-discovery | igel.macAddress | string | true |
| igel-discovery | igel.osType | string | true |
| igel-discovery | igel.productID | string | true |
| igel-discovery | igel.productName | string | true |
| iis | http.owa.version | string | true |
| iis | http.owa.version.full | string | true |
| iis | rdg.authScheme | string | true |
| iis | rdg.transport | string | true |
| ike | ike.authMethod | string | true |
| ike | ike.dhGroup | string | true |
| ike | ike.encryptionAlgo | string | true |
| ike | ike.esn | string | true |
| ike | ike.exchangeType | string | true |
| ike | ike.flags | string | true |
| ike | ike.hashAlgo | string | true |
| ike | ike.initiatorSPI | string | true |
| ike | ike.integrityAlgo | string | true |
| ike | ike.keyLength | string | true |
| ike | ike.lifeDuration | string | true |
| ike | ike.lifeType | string | true |
| ike | ike.messageID | string | true |
| ike | ike.messageLength | string | true |
| ike | ike.nextPayload | string | true |
| ike | ike.nonESPMarker | string | true |
| ike | ike.notifyTypes | string | true |
| ike | ike.payload | string | true |
| ike | ike.payloadCount | numeric | true |
| ike | ike.prfAlgo | string | true |
| ike | ike.reply | string | true |
| ike | ike.responderSPI | string | true |
| ike | ike.saProtocol | string | true |
| ike | ike.sha1 | string | true |
| ike | ike.vendorID | string | true |
| ike | ike.vendorIDCount | numeric | true |
| ike | ike.version | string | true |
| imap | imap.authMethods | string | true |
| imap | imap.authPlain | string | true |
| imap | imap.banner | string | true |
| imap | imap.capabilities | string | true |
| imap | imap.capabilityCount | numeric | true |
| imap | imap.capabilityStatus | string | true |
| imap | imap.capabilityText | string | true |
| imap | imap.greeting | string | true |
| imap | imap.greetingText | string | true |
| imap | imap.loginDisabled | string | true |
| imap | imap.product | string | true |
| imap | imap.responseCode | string | true |
| imap | imap.revision | string | true |
| imap | imap.startTLS | string | true |
| imap | imap.vendor | string | true |
| imap | imap.version | string | true |
| influxdb | influxdb.build | string | true |
| influxdb | influxdb.databases | string | false |
| influxdb | influxdb.version | string | true |
| ipmi | ipmi.additionalSupport | numeric | true |
| ipmi | ipmi.additionalSupportRaw | numeric | true |
| ipmi | ipmi.authTypes | string | true |
| ipmi | ipmi.auxFirmwareRev | string | true |
| ipmi | ipmi.channel | string | true |
| ipmi | ipmi.cipherSuites | string | true |
| ipmi | ipmi.cipherSuitesRaw | string | true |
| ipmi | ipmi.cipherSuitesText | string | true |
| ipmi | ipmi.cipherZero | string | true |
| ipmi | ipmi.ciphers | string | true |
| ipmi | ipmi.ciphersPageError | string | true |
| ipmi | ipmi.ciphersRaw | string | true |
| ipmi | ipmi.command | string | true |
| ipmi | ipmi.completionCode | string | true |
| ipmi | ipmi.completionCodeDec | string | true |
| ipmi | ipmi.connVersions | string | true |
| ipmi | ipmi.connVersionsRaw | string | true |
| ipmi | ipmi.deviceID | string | true |
| ipmi | ipmi.deviceRevision | string | true |
| ipmi | ipmi.deviceRevisionRaw | string | true |
| ipmi | ipmi.errors | string | true |
| ipmi | ipmi.fakeUsername | string | true |
| ipmi | ipmi.firmware | string | true |
| ipmi | ipmi.firmwareRevision | string | true |
| ipmi | ipmi.ipmiVersion | string | true |
| ipmi | ipmi.manufacturer | string | true |
| ipmi | ipmi.manufacturerID | string | true |
| ipmi | ipmi.manufacturerName | string | true |
| ipmi | ipmi.oemData | string | true |
| ipmi | ipmi.oemID | string | true |
| ipmi | ipmi.oemName | string | true |
| ipmi | ipmi.passAuth | string | true |
| ipmi | ipmi.passAuthRaw | string | true |
| ipmi | ipmi.port | numeric | true |
| ipmi | ipmi.productID | string | true |
| ipmi | ipmi.rakp.authCiphers | string | true |
| ipmi | ipmi.rakp.ciphers | string | true |
| ipmi | ipmi.rakp.count | numeric | true |
| ipmi | ipmi.rakp.cracked | string | true |
| ipmi | ipmi.rakp.crackedCount | numeric | true |
| ipmi | ipmi.rakp.guids | string | true |
| ipmi | ipmi.rakp.hashes | string | true |
| ipmi | ipmi.rakp.passwords | string | true |
| ipmi | ipmi.rakp.sessionIDs | string | true |
| ipmi | ipmi.rakp.usernames | string | true |
| ipmi | ipmi.response.commandMismatch | string | true |
| ipmi | ipmi.response.data | string | true |
| ipmi | ipmi.response.dataLen | string | true |
| ipmi | ipmi.response.parseError | string | true |
| ipmi | ipmi.response.raw | string | true |
| ipmi | ipmi.response.text | string | true |
| ipmi | ipmi.rmcpPlus | string | true |
| ipmi | ipmi.session.ID | string | true |
| ipmi | ipmi.session.activateAuthType | string | true |
| ipmi | ipmi.session.activateAuthTypeName | string | true |
| ipmi | ipmi.session.activateID | string | true |
| ipmi | ipmi.session.activateInboundSeq | string | true |
| ipmi | ipmi.session.activateMaxPriv | string | true |
| ipmi | ipmi.session.activateMaxPrivName | string | true |
| ipmi | ipmi.session.activateStatus | string | true |
| ipmi | ipmi.session.challenge | string | true |
| ipmi | ipmi.session.challengeAuthType | string | true |
| ipmi | ipmi.session.challengeAuthTypeName | string | true |
| ipmi | ipmi.session.challengeID | string | true |
| ipmi | ipmi.session.challengeStatus | string | true |
| ipmi | ipmi.session.consoleID | string | true |
| ipmi | ipmi.session.status | string | true |
| ipmi | ipmi.session.statusCode | string | true |
| ipmi | ipmi.session.username | string | true |
| ipmi | ipmi.srcAddr | string | true |
| ipmi | ipmi.srcLun | string | true |
| ipmi | ipmi.system.guid | string | true |
| ipmi | ipmi.system.guidText | string | true |
| ipmi | ipmi.systemGUID | string | true |
| ipmi | ipmi.target | string | true |
| ipmi | ipmi.tgtAddr | string | true |
| ipmi | ipmi.tgtLun | string | true |
| ipmi | ipmi.userAuth | string | true |
| ipmi | ipmi.userAuthRaw | string | true |
| ipmi | ipmi.v2.0 | string | true |
| ipp | ipp.firmwareVersion | string | true |
| ipp | ipp.ippVersions | string | true |
| ipp | ipp.printerMakeAndModel | string | true |
| ipp | ipp.printerName | string | true |
| ipp | ipp.printerState | string | true |
| ipp | ipp.printerURI | string | true |
| ippbrowse | ippbrowse.info | string | true |
| ippbrowse | ippbrowse.location | string | true |
| ippbrowse | ippbrowse.makeModel | string | true |
| ippbrowse | ippbrowse.state | string | true |
| ippbrowse | ippbrowse.type | string | true |
| ippbrowse | ippbrowse.uri | string | true |
| ipsec | ipsec.aggressiveMode | string | true |
| ipsec | ipsec.authenticationOnly | string | true |
| ipsec | ipsec.commit | string | true |
| ipsec | ipsec.encrypted | string | true |
| ipsec | ipsec.exchangeType | string | true |
| ipsec | ipsec.exchangeTypeID | string | true |
| ipsec | ipsec.flags | string | true |
| ipsec | ipsec.flagsRaw | string | true |
| ipsec | ipsec.initiatorSPI | string | true |
| ipsec | ipsec.messageID | string | true |
| ipsec | ipsec.messageLength | string | true |
| ipsec | ipsec.nextPayload | string | true |
| ipsec | ipsec.nextPayloadID | string | true |
| ipsec | ipsec.payloadCount | numeric | true |
| ipsec | ipsec.payloads | string | true |
| ipsec | ipsec.port | numeric | true |
| ipsec | ipsec.responderSPI | string | true |
| ipsec | ipsec.target | string | true |
| ipsec | ipsec.vendorIDCount | numeric | true |
| ipsec | ipsec.vendorIDs | string | true |
| ipsec | ipsec.version | string | true |
| ipsec | ipsec.versionRaw | string | true |
| irc | irc.banner | string | true |
| irc | irc.channelCount | numeric | true |
| irc | irc.channelModes | string | true |
| irc | irc.core.sim | string | true |
| irc | irc.cpe23 | string | true |
| irc | irc.createdDate | string | true |
| irc | irc.error | string | true |
| irc | irc.example.net | string | true |
| irc | irc.networkName | string | true |
| irc | irc.product | string | true |
| irc | irc.serverName | string | true |
| irc | irc.serverSoftware | string | true |
| irc | irc.userCount | numeric | true |
| irc | irc.userModes | string | true |
| irc | irc.vendor | string | true |
| irc | irc.version | string | true |
| iscsi | iscsi.acknowledge | string | true |
| iscsi | iscsi.authMethod | string | true |
| iscsi | iscsi.bidiReadResidualCount | numeric | true |
| iscsi | iscsi.bufferOffset | string | true |
| iscsi | iscsi.continue | string | true |
| iscsi | iscsi.currentStage | string | true |
| iscsi | iscsi.dataDigest | string | true |
| iscsi | iscsi.dataSN | string | true |
| iscsi | iscsi.expCmdSN | string | true |
| iscsi | iscsi.expDataSN | string | true |
| iscsi | iscsi.final | string | true |
| iscsi | iscsi.flags.readResidualOverflow | string | true |
| iscsi | iscsi.flags.readResidualUnderflow | string | true |
| iscsi | iscsi.flags.residualOverflow | string | true |
| iscsi | iscsi.flags.residualUnderflow | string | true |
| iscsi | iscsi.flags.status | string | true |
| iscsi | iscsi.headerDigest | string | true |
| iscsi | iscsi.immediateDelivery | string | true |
| iscsi | iscsi.initiatorTaskTag | string | true |
| iscsi | iscsi.isid | string | true |
| iscsi | iscsi.keyvalue.MaxRecvDataSegmentLength | string | true |
| iscsi | iscsi.keyvalue.authMethod | string | true |
| iscsi | iscsi.keyvalue.dataDigest | string | true |
| iscsi | iscsi.keyvalue.defaultTime2Retain | string | true |
| iscsi | iscsi.keyvalue.defaultTime2Wait | string | true |
| iscsi | iscsi.keyvalue.errorRecoveryLevel | string | true |
| iscsi | iscsi.keyvalue.headerDigest | string | true |
| iscsi | iscsi.keyvalue.ifmarker | string | true |
| iscsi | iscsi.keyvalue.maxConnections | numeric | true |
| iscsi | iscsi.keyvalue.ofmarker | string | true |
| iscsi | iscsi.keyvalue.targetAddress | string | true |
| iscsi | iscsi.keyvalue.targetName | string | true |
| iscsi | iscsi.keyvalue.xCom.cisco.pingTimeout | string | true |
| iscsi | iscsi.keyvalue.xCom.cisco.protocol | string | true |
| iscsi | iscsi.keyvalue.xCom.cisco.sendAsyncText | string | true |
| iscsi | iscsi.logout.response | string | true |
| iscsi | iscsi.lun | string | true |
| iscsi | iscsi.lunAddressMode | string | true |
| iscsi | iscsi.maxCmdSN | string | true |
| iscsi | iscsi.nextStage | string | true |
| iscsi | iscsi.opcode | string | true |
| iscsi | iscsi.residualCount | numeric | true |
| iscsi | iscsi.response | string | true |
| iscsi | iscsi.statSN | string | true |
| iscsi | iscsi.status | string | true |
| iscsi | iscsi.statusClass | string | true |
| iscsi | iscsi.statusDetail | string | true |
| iscsi | iscsi.targetAddress | string | true |
| iscsi | iscsi.targetAddresses | string | true |
| iscsi | iscsi.targetCount | string | true |
| iscsi | iscsi.targetName | string | true |
| iscsi | iscsi.targetNames | string | true |
| iscsi | iscsi.time2Retain | string | true |
| iscsi | iscsi.time2Wait | string | true |
| iscsi | iscsi.transferTaskTag | string | true |
| iscsi | iscsi.transit | string | true |
| iscsi | iscsi.tsih | string | true |
| iscsi | iscsi.unknownData | string | true |
| iscsi | iscsi.versionActive | string | true |
| iscsi | iscsi.versionMax | string | true |
| iscsi | iscsi.versionMin | string | true |
| iua | iua.errorCode | string | true |
| iua | iua.infoString | string | true |
| iua | iua.messageClass | string | true |
| iua | iua.messageType | string | true |
| javarmi | javarmi.endpoint | string | true |
| javarmi | javarmi.endpointHost | string | true |
| javarmi | javarmi.endpointPort | numeric | true |
| javarmi | rmi.example.com | string | true |
| jdwp | jdwp.banner | string | true |
| jdwp | jdwp.description | string | true |
| jdwp | jdwp.major | string | true |
| jdwp | jdwp.minor | string | true |
| jdwp | jdwp.packetID | string | true |
| jdwp | jdwp.version | string | true |
| jdwp | jdwp.vmName | string | true |
| jdwp | jdwp.vmVersion | string | true |
| jetdirect | jetdirect.banner | string | true |
| jetdirect | jetdirect.cpe23 | string | true |
| jetdirect | jetdirect.filesystemAccess | string | true |
| jetdirect | jetdirect.firmware | string | true |
| jetdirect | jetdirect.id | string | true |
| jetdirect | jetdirect.model | string | true |
| jetdirect | jetdirect.status | string | true |
| jetdirect | jetdirect.vendor | string | true |
| jetdirect | pjl.id | string | true |
| jira | jira.baseURL | string | true |
| jira | jira.build | string | true |
| jira | jira.version | string | true |
| jms | jms.admin | string | true |
| jms | jms.cluster | string | true |
| jms | jms.jms | string | true |
| jms | jms.jmsdirect | string | true |
| jms | jms.jmxrmi | string | true |
| jms | jms.jmxrmi.env.url | string | true |
| jms | jms.jmxrmi.env.version | string | true |
| jms | jms.mqdirect2 | string | true |
| jms | jms.portmapper | numeric | true |
| jms | jms.portmapper.env.imqhome | numeric | true |
| jms | jms.portmapper.env.imqvarhome | numeric | true |
| jms | jms.portmapper.env.sessionid | numeric | true |
| jms | jms.services | string | false |
| jms | jms.tcp.ports | numeric | false |
| jms | jms.version | string | true |
| kafka | kafka.correlationID | string | true |
| kafka | kafka.version | string | true |
| kasa | kasa.deviceAlias | string | true |
| kasa | kasa.deviceId | string | true |
| kasa | kasa.deviceType | string | true |
| kasa | kasa.hardwareAddress | string | true |
| kasa | kasa.hardwareId | string | true |
| kasa | kasa.hardwareVersion | string | true |
| kasa | kasa.model | string | true |
| kasa | kasa.obdSource | string | true |
| kasa | kasa.oemId | string | true |
| kasa | kasa.softwareVersion | string | true |
| kerberos | kerberos.error | string | true |
| kerberos | kerberos.errorCode | string | true |
| kerberos | kerberos.errorCodeName | string | true |
| kerberos | kerberos.messageType | string | true |
| kerberos | kerberos.messageTypeCode | string | true |
| kerberos | kerberos.microseconds | string | true |
| kerberos | kerberos.port | numeric | true |
| kerberos | kerberos.realm | string | true |
| kerberos | kerberos.serverTS | numeric | true |
| kerberos | kerberos.servicePrincipal | string | true |
| kerberos | kerberos.target | string | true |
| kerberos | kerberos.ticket.realm | string | true |
| kerberos | kerberos.version | string | true |
| knxnet | knxnet.address | string | true |
| knxnet | knxnet.bus.address | string | true |
| knxnet | knxnet.bus.applicationID | string | true |
| knxnet | knxnet.bus.descriptor | string | true |
| knxnet | knxnet.bus.firmwareRevision | string | true |
| knxnet | knxnet.bus.hardwareType | string | true |
| knxnet | knxnet.bus.manufacturerID | string | true |
| knxnet | knxnet.bus.name | string | true |
| knxnet | knxnet.bus.orderInfo | string | true |
| knxnet | knxnet.bus.programVersion | string | true |
| knxnet | knxnet.bus.serialNumber | string | true |
| knxnet | knxnet.busDevice | string | false |
| knxnet | knxnet.busDeviceCount | numeric | true |
| knxnet | knxnet.channel | string | true |
| knxnet | knxnet.decodeErrors | string | true |
| knxnet | knxnet.decodeWarning | string | false |
| knxnet | knxnet.descriptor | string | true |
| knxnet | knxnet.firmwareRevision | string | true |
| knxnet | knxnet.hardwareType | string | true |
| knxnet | knxnet.hpaiDataEP | string | false |
| knxnet | knxnet.mac | string | true |
| knxnet | knxnet.manufacturerData | string | true |
| knxnet | knxnet.manufacturerID | string | true |
| knxnet | knxnet.medium | string | true |
| knxnet | knxnet.multicast | string | true |
| knxnet | knxnet.multicastAddress | string | true |
| knxnet | knxnet.name | string | true |
| knxnet | knxnet.orderInfo | string | true |
| knxnet | knxnet.remoteDevice | string | false |
| knxnet | knxnet.remoteDeviceCount | numeric | true |
| knxnet | knxnet.serial | string | true |
| knxnet | knxnet.serialNumber | string | true |
| knxnet | knxnet.service.Core | string | true |
| knxnet | knxnet.service.Tunnelling | string | true |
| knxnet | knxnet.serviceFamilies | string | true |
| knxnet | knxnet.status | string | true |
| knxnet | knxnet.tunnelData | string | true |
| knxnet | knxnet.tunnelEP | string | false |
| knxnet | knxnet.type | string | true |
| l2t | l2t.assignedTunnelID | string | true |
| l2t | l2t.bearerCaps | string | true |
| l2t | l2t.firmwareRevision | string | true |
| l2t | l2t.framingCaps | string | true |
| l2t | l2t.hostName | string | true |
| l2t | l2t.messageType | string | true |
| l2t | l2t.protocolVersion | string | true |
| l2t | l2t.vendorName | string | true |
| l2tp | l2tp.assignedTunnelID | string | true |
| l2tp | l2tp.bearerCaps | string | true |
| l2tp | l2tp.controlCode | string | true |
| l2tp | l2tp.errorCode | string | true |
| l2tp | l2tp.errorMsg | string | true |
| l2tp | l2tp.firmwareRevision | string | true |
| l2tp | l2tp.framingCaps | string | true |
| l2tp | l2tp.hostName | string | true |
| l2tp | l2tp.nr | string | true |
| l2tp | l2tp.ns | string | true |
| l2tp | l2tp.protoVersion | string | true |
| l2tp | l2tp.recvWindowSize | string | true |
| l2tp | l2tp.resultCode | string | true |
| l2tp | l2tp.sessionID | string | true |
| l2tp | l2tp.tunnelID | string | true |
| l2tp | l2tp.unknownType | string | true |
| l2tp | l2tp.vendorName | string | true |
| landesk | landesk.configPath | string | true |
| landesk | landesk.providerVersion | string | true |
| landesk | landesk.serverVersion | string | true |
| langflow | service.product | string | true |
| langflow | service.version | string | true |
| lantronix | lantronix.fwinfo | string | true |
| lantronix | lantronix.mac | string | true |
| lantronix | lantronix.macVendor | string | true |
| lantronix | lantronix.serial | string | true |
| lantronix | lantronix.type | string | true |
| lantronix | lantronix.version | string | true |
| ldap | ldap.auth | string | true |
| ldap | ldap.configurationNamingContext | string | true |
| ldap | ldap.currentTime | string | true |
| ldap | ldap.defaultNamingContext | string | true |
| ldap | ldap.diagMessage | string | true |
| ldap | ldap.dnsHostName | string | true |
| ldap | ldap.domainControllerFunctionality | string | true |
| ldap | ldap.domainFunctionality | string | true |
| ldap | ldap.dsServiceName | string | true |
| ldap | ldap.error | string | true |
| ldap | ldap.example.com | string | true |
| ldap | ldap.forestFunctionality | string | true |
| ldap | ldap.isGlobalCatalogReady | string | true |
| ldap | ldap.isSynchronized | string | true |
| ldap | ldap.matchedDN | string | true |
| ldap | ldap.namingContexts | numeric | true |
| ldap | ldap.notes | string | false |
| ldap | ldap.resultCode | string | true |
| ldap | ldap.resultCodeName | string | true |
| ldap | ldap.rootDomainNamingContext | string | true |
| ldap | ldap.schemaNamingContext | string | true |
| ldap | ldap.searchresult | string | true |
| ldap | ldap.serverName | string | true |
| ldap | ldap.serverType | string | true |
| ldap | ldap.startTLS | string | true |
| ldap | ldap.subschemaSubentry | string | true |
| ldap | ldap.supportedControl | string | true |
| ldap | ldap.supportedControls | numeric | true |
| ldap | ldap.supportedExtension | string | true |
| ldap | ldap.supportedExtensions | numeric | true |
| ldap | ldap.supportedLDAPVersion | string | true |
| ldap | ldap.supportedSASLMechanisms | numeric | true |
| ldap | ldap.supportsStartTLS | numeric | true |
| ldap | ldap.vendorName | string | true |
| ldap | ldap.vendorVersion | string | true |
| legacy | mongodb.auth | string | true |
| llmnr | llmnr.ipv4 | string | true |
| llmnr | llmnr.ipv6 | string | true |
| llmnr | llmnr.name | string | true |
| lockdownd | lockdownd.cpuArchitecture | string | true |
| lockdownd | lockdownd.deviceName | string | true |
| lockdownd | lockdownd.hardwareModel | string | true |
| lockdownd | lockdownd.productName | string | true |
| lockdownd | lockdownd.productType | string | true |
| lockdownd | lockdownd.productVersion | string | true |
| lockdownd | lockdownd.supportedDeviceFamilies | string | true |
| lpd | lpd.banner | string | true |
| lwm2m | lwm2m.bootstrapServer | string | true |
| lwm2m | lwm2m.payload | string | true |
| lwm2m | lwm2m.registrationDirectory | string | true |
| lwm2m | lwm2m.serverImpl | string | true |
| m2pa | m2pa.errorCode | string | true |
| m2pa | m2pa.infoString | string | true |
| m2pa | m2pa.linkState | string | true |
| m2pa | m2pa.linkStateName | string | true |
| m2pa | m2pa.messageClass | string | true |
| m2pa | m2pa.messageType | string | true |
| m2ua | m2ua.errorCode | string | true |
| m2ua | m2ua.infoString | string | true |
| m2ua | m2ua.messageClass | string | true |
| m2ua | m2ua.messageType | string | true |
| m3ua | m3ua.errorCode | string | true |
| m3ua | m3ua.infoString | string | true |
| m3ua | m3ua.messageClass | string | true |
| m3ua | m3ua.messageType | string | true |
| managesieve | managesieve.banner | string | true |
| managesieve | managesieve.extensions | string | true |
| managesieve | managesieve.implementation | string | true |
| managesieve | managesieve.language | string | true |
| managesieve | managesieve.sasl | string | true |
| managesieve | managesieve.startTLS | string | true |
| managesieve | managesieve.version | string | true |
| matcher | adb.access | string | true |
| matcher | amqp.protocolVersion | string | true |
| matcher | amqp.saslRequired | string | true |
| matcher | amqp.tlsRequired | string | true |
| matcher | banner | string | true |
| matcher | munin.hostname | string | true |
| matcher | mysql.error | string | true |
| matcher | mysql.version | string | true |
| matcher | pjl.id | string | true |
| matcher | pptp.bearerCapabilities | string | true |
| matcher | pptp.errorCode | numeric | true |
| matcher | pptp.framingCapabilities | string | true |
| matcher | pptp.fwRevision | numeric | true |
| matcher | pptp.hostname | string | true |
| matcher | pptp.maxChannels | numeric | true |
| matcher | pptp.resultCode | numeric | true |
| matcher | pptp.vendor | string | true |
| matcher | roomalert.ipAddress | string | false |
| matcher | roomalert.macAddress | string | false |
| matcher | roomalert.model | string | false |
| matcher | roomalert.osVersion | string | false |
| matcher | vnc.version | string | true |
| matcher_client | http.method | string | true |
| matcher_client | http.path | string | true |
| matcher_registry | banner | string | true |
| matcher_registry | unknown-banner | string | true |
| megaco | megaco.banner | string | true |
| megaco | megaco.error | string | true |
| megaco | megaco.errorCode | string | true |
| megaco | megaco.format | string | true |
| megaco | megaco.mid | string | true |
| megaco | megaco.port | numeric | true |
| megaco | megaco.profile | string | true |
| megaco | megaco.replyID | string | true |
| megaco | megaco.serviceChange | string | true |
| megaco | megaco.target | string | true |
| megaco | megaco.transactionID | string | true |
| megaco | megaco.version | string | true |
| melsecq | melsecq.cpe | string | true |
| melsecq | melsecq.cpuModel | string | true |
| memcached | memcached.binaryProtocol | string | true |
| memcached | memcached.bytes | string | true |
| memcached | memcached.connections | numeric | true |
| memcached | memcached.error | string | true |
| memcached | memcached.items | string | true |
| memcached | memcached.libevent | string | true |
| memcached | memcached.maxBytes | string | true |
| memcached | memcached.maxConnections | numeric | true |
| memcached | memcached.pid | string | true |
| memcached | memcached.pointerSize | string | true |
| memcached | memcached.threads | string | true |
| memcached | memcached.totalConnections | string | true |
| memcached | memcached.totalItems | string | true |
| memcached | memcached.uptime | numeric | true |
| memcached | memcached.version | string | true |
| mgcp | mgcp.endpoint | string | true |
| mgcp | mgcp.endpoints | numeric | true |
| mgcp | mgcp.localOptions | string | true |
| mgcp | mgcp.mode | string | true |
| mgcp | mgcp.packages | string | true |
| mgcp | mgcp.responseCode | string | true |
| mgcp | mgcp.signals | string | true |
| mikrotikwinbox | mikrotikwinbox.banner | string | true |
| mikrotikwinbox | mikrotikwinbox.subProtocol | string | true |
| minecraft | minecraft.currentplayers | string | true |
| minecraft | minecraft.maxplayers | string | true |
| minecraft | minecraft.motd | string | true |
| minecraft | minecraft.version | string | true |
| modbus | modbus.applicationName | string | true |
| modbus | modbus.deviceCount | numeric | true |
| modbus | modbus.exception | string | true |
| modbus | modbus.function | string | true |
| modbus | modbus.gateway | string | true |
| modbus | modbus.gatewayPort | numeric | true |
| modbus | modbus.identifier | string | true |
| modbus | modbus.modelName | string | true |
| modbus | modbus.port | numeric | true |
| modbus | modbus.productCode | string | true |
| modbus | modbus.productName | string | true |
| modbus | modbus.registers | string | true |
| modbus | modbus.remote | string | true |
| modbus | modbus.revision | string | true |
| modbus | modbus.subDeviceCount | numeric | true |
| modbus | modbus.target | string | true |
| modbus | modbus.unitID | string | true |
| modbus | modbus.vendor | string | true |
| modbus | modbus.vendorURL | string | true |
| mongodb | mongodb.allocator | string | true |
| mongodb | mongodb.auth | string | true |
| mongodb | mongodb.bits | numeric | true |
| mongodb | mongodb.buildEnvironment.cc | string | true |
| mongodb | mongodb.buildEnvironment.ccflags | string | true |
| mongodb | mongodb.buildEnvironment.cxx | string | true |
| mongodb | mongodb.buildEnvironment.cxxflags | string | true |
| mongodb | mongodb.buildEnvironment.distarch | string | true |
| mongodb | mongodb.buildEnvironment.distmod | string | true |
| mongodb | mongodb.buildEnvironment.linkflags | string | true |
| mongodb | mongodb.buildEnvironment.target_arch | string | true |
| mongodb | mongodb.buildEnvironment.target_os | string | true |
| mongodb | mongodb.cpuArch | string | true |
| mongodb | mongodb.debug | bool | true |
| mongodb | mongodb.error | string | true |
| mongodb | mongodb.gitVersion | string | true |
| mongodb | mongodb.hostname | string | true |
| mongodb | mongodb.isMaster | string | true |
| mongodb | mongodb.javascriptEngine | string | true |
| mongodb | mongodb.jsEngine | string | true |
| mongodb | mongodb.legacyWireVersion | string | true |
| mongodb | mongodb.maxBsonObjectSize | numeric | true |
| mongodb | mongodb.maxWireVersion | string | true |
| mongodb | mongodb.memSizeMB | string | true |
| mongodb | mongodb.minWireVersion | string | true |
| mongodb | mongodb.modules | string | false |
| mongodb | mongodb.mongos | string | true |
| mongodb | mongodb.numCores | string | true |
| mongodb | mongodb.ok | string | true |
| mongodb | mongodb.opcode | string | true |
| mongodb | mongodb.openssl.compiled | string | true |
| mongodb | mongodb.openssl.running | string | true |
| mongodb | mongodb.os | string | true |
| mongodb | mongodb.osVersion | string | true |
| mongodb | mongodb.readOnly | string | true |
| mongodb | mongodb.setParameter.md5 | string | true |
| mongodb | mongodb.storageEngines | string | false |
| mongodb | mongodb.sysInfo | string | true |
| mongodb | mongodb.version | string | true |
| mongodb | mongodb.versionArray | string | false |
| mqtt | mqtt.broker.authRequired | boolean | true |
| mqtt | mqtt.broker.supportedProtocols | numeric | true |
| mqtt | mqtt.broker.sys.buildTime | string | true |
| mqtt | mqtt.broker.sys.clients.connected | string | true |
| mqtt | mqtt.broker.sys.clients.maximum | string | true |
| mqtt | mqtt.broker.sys.clients.total | string | true |
| mqtt | mqtt.broker.sys.messages.retained.count | numeric | true |
| mqtt | mqtt.broker.sys.messages.stored | string | true |
| mqtt | mqtt.broker.sys.subscriptions.count | numeric | true |
| mqtt | mqtt.broker.sys.time | string | true |
| mqtt | mqtt.broker.sys.uptime | numeric | true |
| mqtt | mqtt.broker.sys.version | string | true |
| mqtt | mqtt.connAckCode | string | true |
| mqtt | mqtt.connAckMessage | string | true |
| mqtt | mqtt.isV5 | string | true |
| mqtt | mqtt.port | numeric | true |
| mqtt | mqtt.protocolVersion | string | true |
| mqtt | mqtt.sessionPresent | string | true |
| mqtt | mqtt.target | string | true |
| mssql | mssql.browser.response | string | false |
| mssql | mssql.encryption | string | true |
| mssql | mssql.encryptionCode | string | true |
| mssql | mssql.instanceName | string | true |
| mssql | mssql.instanceNames | string | true |
| mssql | mssql.isClustered | string | true |
| mssql | mssql.mars | string | true |
| mssql | mssql.nps | string | true |
| mssql | mssql.ntlm.dnsComputer | string | true |
| mssql | mssql.ntlm.dnsDomain | string | true |
| mssql | mssql.ntlm.dnsTree | string | true |
| mssql | mssql.ntlm.negotiateFlags | string | true |
| mssql | mssql.ntlm.netbiosComputer | string | true |
| mssql | mssql.ntlm.netbiosDomain | string | true |
| mssql | mssql.ntlm.osBuild | string | true |
| mssql | mssql.ntlm.osVersion | string | true |
| mssql | mssql.ntlm.targetName | string | true |
| mssql | mssql.ntlm.timestamp | numeric | true |
| mssql | mssql.packetType | string | true |
| mssql | mssql.packetTypeCode | string | true |
| mssql | mssql.port | numeric | true |
| mssql | mssql.product | string | true |
| mssql | mssql.requiresEncryption | string | true |
| mssql | mssql.requiresTDS8Strict | string | true |
| mssql | mssql.serverName | string | true |
| mssql | mssql.serverNames | string | true |
| mssql | mssql.sessionEncryption | string | true |
| mssql | mssql.target | string | true |
| mssql | mssql.tcp | string | true |
| mssql | mssql.tcp.ports | numeric | false |
| mssql | mssql.version | string | true |
| mssql | mssql.versionBuild | string | true |
| mssql | mssql.versionMajor | string | true |
| mssql | mssql.versionMinor | string | true |
| mssql | mssql.versionName | string | true |
| mssql | mssql.versionSubBuild | string | true |
| mssql | mssql.versions | string | true |
| munin | munin.capabilities | string | false |
| munin | munin.hostname | string | true |
| munin | munin.metrics | string | false |
| munin | munin.nodes | string | false |
| munin | munin.rawBanner | string | true |
| munin | munin.tlsRequired | boolean | true |
| munin | munin.version | string | true |
| mysql | mysql.authPluginDataLength | string | true |
| mysql | mysql.authPluginName | string | true |
| mysql | mysql.capabilities | string | true |
| mysql | mysql.capabilityFlags | string | true |
| mysql | mysql.characterSet | string | true |
| mysql | mysql.characterSetName | string | true |
| mysql | mysql.connectionID | string | true |
| mysql | mysql.error | string | true |
| mysql | mysql.errorCode | string | true |
| mysql | mysql.errorMessage | string | true |
| mysql | mysql.errorSQLState | string | true |
| mysql | mysql.family | string | true |
| mysql | mysql.normalizedVersion | string | true |
| mysql | mysql.packetType | string | true |
| mysql | mysql.product | string | true |
| mysql | mysql.protocolVersion | string | true |
| mysql | mysql.ssl | string | true |
| mysql | mysql.sslSupported | numeric | true |
| mysql | mysql.status | string | true |
| mysql | mysql.statusFlags | string | true |
| mysql | mysql.version | string | true |
| mysqlx | mysqlx.authentication.mechanisms | string | true |
| mysqlx | mysqlx.client.interactive | string | true |
| mysqlx | mysqlx.client.pwdExpireOk | string | true |
| mysqlx | mysqlx.compression.algorithm | string | true |
| mysqlx | mysqlx.doc.formats | numeric | true |
| mysqlx | mysqlx.error | string | true |
| mysqlx | mysqlx.errorCode | string | true |
| mysqlx | mysqlx.errorSeverity | string | true |
| mysqlx | mysqlx.messageType | string | true |
| mysqlx | mysqlx.nodeType | string | true |
| mysqlx | mysqlx.tls | string | true |
| natpmp | natpmp.externalIP | string | true |
| natpmp | natpmp.lastChange | string | true |
| natpmp | natpmp.responseCode | string | true |
| nats | nats.authRequired | boolean | true |
| nats | nats.banner | string | true |
| nats | nats.clientID | string | true |
| nats | nats.clientIP | string | true |
| nats | nats.cluster | string | true |
| nats | nats.connectURLs | string | true |
| nats | nats.domain | string | true |
| nats | nats.gitCommit | string | true |
| nats | nats.goVersion | string | true |
| nats | nats.headers | string | true |
| nats | nats.host | string | true |
| nats | nats.info | string | true |
| nats | nats.jetStream | string | true |
| nats | nats.ldm | string | true |
| nats | nats.maxPayload | string | true |
| nats | nats.nonce | string | true |
| nats | nats.ok | string | true |
| nats | nats.pong | string | true |
| nats | nats.port | numeric | true |
| nats | nats.proto | string | true |
| nats | nats.serverID | string | true |
| nats | nats.serverName | string | true |
| nats | nats.tlsAvailable | string | true |
| nats | nats.tlsRequired | boolean | true |
| nats | nats.tlsVerify | string | true |
| nats | nats.version | string | true |
| ndmp | ndmp.reason | string | true |
| ndmp | ndmp.status | string | true |
| ndmp | ndmp.statusName | string | true |
| ndmp | ndmp.timestampTS | numeric | true |
| ndmp | ndmp.version | string | true |
| neo4j | neo4j.boltVersion | string | true |
| neo4j | neo4j.neo4jVersion | string | true |
| neo4j | neo4j.server | string | true |
| neo4j | neo4j.serverVersion | string | true |
| netbios | netbios.addrs | string | true |
| netbios | netbios.domain | string | true |
| netbios | netbios.domainController | string | true |
| netbios | netbios.mac | string | true |
| netbios | netbios.macDateAdded | string | true |
| netbios | netbios.macVendor | string | true |
| netbios | netbios.name | string | true |
| netbios | netbios.names | string | true |
| netbios | netbios.nodeType | string | true |
| netbios | netbios.primarydomainController | string | true |
| netbios | netbios.responseType | string | true |
| netbios | netbios.username | string | true |
| nfs | nfs.allowed | string | false |
| nfs | nfs.detected | boolean | true |
| nfs | nfs.exports | string | true |
| nfs | nfs.maxVersion | string | true |
| nfs | nfs.minVersion | string | true |
| nfs | nfs.unknownReply | string | true |
| nfs | nfs.verifierFlavor | string | true |
| nfs | nfs.versions | string | true |
| nfs | nfs.xid | string | true |
| nrpe | nrpe.commandArgsEnabled | boolean | true |
| nrpe | nrpe.output | string | true |
| nrpe | nrpe.resultCode | string | true |
| nrpe | nrpe.version | string | true |
| ntp | ntp.controlAssociationID | string | true |
| ntp | ntp.controlOpcode | string | true |
| ntp | ntp.controlSequence | string | true |
| ntp | ntp.controlStatus | string | true |
| ntp | ntp.controlVersion | string | true |
| ntp | ntp.interval | string | true |
| ntp | ntp.leapIndicator | string | true |
| ntp | ntp.leapIndicatorCode | string | true |
| ntp | ntp.mode | string | true |
| ntp | ntp.modeCode | string | true |
| ntp | ntp.monlistItemSize | string | true |
| ntp | ntp.monlistNumItems | string | true |
| ntp | ntp.monlistSupported | numeric | true |
| ntp | ntp.originTimestamp | numeric | true |
| ntp | ntp.poll | string | true |
| ntp | ntp.pollSeconds | string | true |
| ntp | ntp.precision | string | true |
| ntp | ntp.precisionSeconds | string | true |
| ntp | ntp.processor | string | true |
| ntp | ntp.readVar | string | true |
| ntp | ntp.receiveTimestamp | numeric | true |
| ntp | ntp.referenceID | string | true |
| ntp | ntp.referenceIDDescription | string | true |
| ntp | ntp.referenceTimestamp | numeric | true |
| ntp | ntp.rootDelay | string | true |
| ntp | ntp.rootDispersion | string | true |
| ntp | ntp.serverTime | string | true |
| ntp | ntp.skew | string | true |
| ntp | ntp.skewMS | string | true |
| ntp | ntp.stratum | string | true |
| ntp | ntp.stratumDescription | string | true |
| ntp | ntp.swVersion | string | true |
| ntp | ntp.system | string | true |
| ntp | ntp.timestamp | string | true |
| ntp | ntp.transmitTimestamp | numeric | true |
| ntp | ntp.version | string | true |
| omronfins | omronfins.banner | string | true |
| omronfins | omronfins.model | string | true |
| omronfins | omronfins.transport | numeric | true |
| omronfins | omronfins.version | string | true |
| opcua | opcua.applications | string | false |
| opcua | opcua.channelCertSHA256 | string | true |
| opcua | opcua.clientThumbprint | string | true |
| opcua | opcua.endpointCerts | numeric | true |
| opcua | opcua.endpointCertsSuppressed | string | true |
| opcua | opcua.endpointCount | numeric | true |
| opcua | opcua.endpointUniqueCerts | numeric | true |
| opcua | opcua.endpoints | numeric | true |
| opcua | opcua.error | string | true |
| opcua | opcua.errorReason | string | true |
| opcua | opcua.errorText | string | true |
| opcua | opcua.maxChunkCount | numeric | true |
| opcua | opcua.maxMessageSize | string | true |
| opcua | opcua.messageType | string | true |
| opcua | opcua.port | numeric | true |
| opcua | opcua.protocol | string | true |
| opcua | opcua.receiveBufferSize | string | true |
| opcua | opcua.revisedLifetime | string | true |
| opcua | opcua.secureChannelID | string | true |
| opcua | opcua.securityPolicy | string | true |
| opcua | opcua.sendBufferSize | string | true |
| opcua | opcua.supportedMessageSecurityModes | numeric | true |
| opcua | opcua.supportedSecurityPolicies | numeric | true |
| opcua | opcua.supportedUserTokenTypes | numeric | true |
| opcua | opcua.target | string | true |
| opcua | opcua.tokenID | string | true |
| opcua | opcua.unknownNodeId | string | true |
| openvpn | openvpn.detected | boolean | true |
| openvpn | openvpn.keyID | string | true |
| openvpn | openvpn.messagePacketID | string | true |
| openvpn | openvpn.opcode | string | true |
| openvpn | openvpn.packetID | string | true |
| openvpn | openvpn.packetIDArrayLength | string | true |
| openvpn | openvpn.remoteSessionID | string | true |
| openvpn | openvpn.reply | string | true |
| openvpn | openvpn.service | string | true |
| openvpn | openvpn.sessionID | string | true |
| oracle | oracle.connectFlags0 | string | true |
| oracle | oracle.connectFlags1 | string | true |
| oracle | oracle.didResend | string | true |
| oracle | oracle.globalServiceOptions | string | true |
| oracle | oracle.nsn.Authentication | string | true |
| oracle | oracle.nsn.Encryption | string | true |
| oracle | oracle.nsnVersion | string | true |
| oracle | oracle.packetType | string | true |
| oracle | oracle.packetTypeCode | string | true |
| oracle | oracle.redirectData | string | true |
| oracle | oracle.redirectDescriptor | string | true |
| oracle | oracle.refuseData | string | true |
| oracle | oracle.refuseDescriptor | string | true |
| oracle | oracle.refuseReason | string | true |
| oracle | oracle.tnsVersion | string | true |
| oracle | oracle.version | string | true |
| oracledb | oracledb.errCode | string | true |
| oracledb | oracledb.packetType | string | true |
| oracledb | oracledb.tns.error | string | true |
| oracledb | oracledb.tns.version | string | true |
| oracledb | oracledb.tns.vsn | string | true |
| oracledb | oracledb.version | string | true |
| oracledb | oracledb.vsnnum | string | true |
| orion | orion.components | string | true |
| orion | orion.version | string | true |
| panxmlapi | host.mac | string | false |
| panxmlapi | host.name | string | false |
| panxmlapi | pan.api.advancedRouting | string | true |
| panxmlapi | pan.api.appVersion | string | true |
| panxmlapi | pan.api.arpcache.ports | string | true |
| panxmlapi | pan.api.avDatabaseVersion | string | true |
| panxmlapi | pan.api.deviceCertificateStatus | string | true |
| panxmlapi | pan.api.globalProtectVersion | string | true |
| panxmlapi | pan.api.logdbVersion | string | true |
| panxmlapi | pan.api.model | string | true |
| panxmlapi | pan.api.multiVsys | string | true |
| panxmlapi | pan.api.operationalMode | string | true |
| panxmlapi | pan.api.osVersion | string | true |
| panxmlapi | pan.api.plugins | string | true |
| panxmlapi | pan.api.serialNumber | string | true |
| panxmlapi | pan.api.threatDatabaseVersion | string | true |
| panxmlapi | pan.api.urlDatabaseVersion | string | true |
| panxmlapi | pan.api.vmMode | string | true |
| panxmlapi | pan.api.vpnDisableMode | string | true |
| panxmlapi | pan.api.wildfireDatabaseVersion | string | true |
| panxmlapi | pan.api.wildfireRt | string | true |
| panxmlapi | snmp.arpcache | string | false |
| pca | pca.caps | string | true |
| pca | pca.isRequest | string | true |
| pca | pca.name | string | true |
| pca | pca.status | string | true |
| pcworx | pcworx.firmwareDate | string | true |
| pcworx | pcworx.firmwareTime | string | true |
| pcworx | pcworx.firmwareVersion | string | true |
| pcworx | pcworx.modelNumber | string | true |
| pcworx | pcworx.plcType | string | true |
| pega | pega.version | string | true |
| pfcp | pfcp.nodeID | string | true |
| pfcp | pfcp.nodeIDType | string | true |
| pfcp | pfcp.recoveryTimestamp | numeric | true |
| pfcp | pfcp.seidPresent | string | true |
| pfcp | pfcp.sequenceNumber | string | true |
| pfcp | pfcp.version | string | true |
| pop3 | pop3.apop | string | true |
| pop3 | pop3.apopBanner | string | true |
| pop3 | pop3.authMethods | string | true |
| pop3 | pop3.banner | string | true |
| pop3 | pop3.capa.message | string | true |
| pop3 | pop3.capa.status | string | true |
| pop3 | pop3.capabilities | string | true |
| pop3 | pop3.capabilityCount | numeric | true |
| pop3 | pop3.expire | string | true |
| pop3 | pop3.implementation | string | true |
| pop3 | pop3.loginDelay | string | true |
| pop3 | pop3.message | string | true |
| pop3 | pop3.pipelining | string | true |
| pop3 | pop3.responseCodes | string | true |
| pop3 | pop3.startTLS | string | true |
| pop3 | pop3.status | string | true |
| pop3 | pop3.top | string | true |
| pop3 | pop3.uidl | string | true |
| pop3 | pop3.userAuth | string | true |
| postgres | postgres.TimeZone | string | true |
| postgres | postgres.authType | string | true |
| postgres | postgres.backendPID | string | true |
| postgres | postgres.errorCode | string | true |
| postgres | postgres.errorMessage | string | true |
| postgres | postgres.noticeMessage | string | true |
| postgres | postgres.noticeSeverity | string | true |
| postgres | postgres.packetType | string | true |
| postgres | postgres.routine | string | true |
| postgres | postgres.serverVersion | string | true |
| postgres | postgres.severity | string | true |
| postgres | postgres.sslSupported | numeric | true |
| postgres | postgres.txStatus | string | true |
| postgres | postgresql.auth.details | string | true |
| postgres | postgresql.auth.method | string | true |
| postgres | postgresql.error.code | numeric | true |
| postgres | postgresql.error.file | string | true |
| postgres | postgresql.error.line | string | true |
| postgres | postgresql.error.message | string | true |
| postgres | postgresql.error.routine | string | true |
| postgres | postgresql.error.severity | string | true |
| postgres | postgresql.error.text | string | true |
| postgres | postgresql.error.unknown | string | true |
| postgresql | postgresql.auth.details | string | true |
| postgresql | postgresql.auth.method | string | true |
| postgresql | postgresql.error.code | string | true |
| postgresql | postgresql.error.file | string | true |
| postgresql | postgresql.error.line | string | true |
| postgresql | postgresql.error.message | string | true |
| postgresql | postgresql.error.routine | string | true |
| postgresql | postgresql.error.severity | string | true |
| postgresql | postgresql.error.text | string | true |
| pptp | pptp.bearerCapabilities | string | true |
| pptp | pptp.errorCode | string | true |
| pptp | pptp.errorText | string | true |
| pptp | pptp.firmwareRevision | string | true |
| pptp | pptp.framingCapabilities | string | true |
| pptp | pptp.fwRevision | string | true |
| pptp | pptp.hostname | string | true |
| pptp | pptp.maxChannels | string | true |
| pptp | pptp.port | numeric | true |
| pptp | pptp.protocolVersion | string | true |
| pptp | pptp.protocolVersionRaw | string | true |
| pptp | pptp.resultCode | string | true |
| pptp | pptp.resultText | string | true |
| pptp | pptp.target | string | true |
| pptp | pptp.vendor | string | true |
| proconos | proconos.bootProject | string | true |
| proconos | proconos.ladderLogicRuntime | string | true |
| proconos | proconos.plcType | string | true |
| proconos | proconos.projectName | string | true |
| proconos | proconos.projectSourceCode | string | true |
| proconos | prosoft.moduleName | string | true |
| proconos | prosoft.operatingSystemRevision | string | true |
| proconos | prosoft.softwareRevision | string | true |
| profinet | profinet.annotation | string | true |
| profinet | profinet.cpe | string | true |
| profinet | profinet.deviceName | string | true |
| profinet | profinet.deviceType | string | true |
| profinet | profinet.vendor | string | true |
| prosoft | firmwareDate | string | true |
| prosoft | moduleName | string | true |
| prosoft | moduleRevision | string | true |
| prosoft | moduleSerial | string | true |
| prosoft | moduleStatus | string | true |
| psdisco | psdisco.appName | string | true |
| psdisco | psdisco.appTitleID | string | true |
| psdisco | psdisco.code | string | true |
| psdisco | psdisco.id | string | true |
| psdisco | psdisco.name | string | true |
| psdisco | psdisco.protoVersion | string | true |
| psdisco | psdisco.requestPort | string | true |
| psdisco | psdisco.status | string | true |
| psdisco | psdisco.sysVersion | string | true |
| psdisco | psdisco.type | string | true |
| pulsar | pulsar.protocolVersion | string | true |
| pulsar | pulsar.serverVersion | string | true |
| pwa_manifest | pwaManifest.id | string | true |
| pwa_manifest | pwaManifest.name | string | true |
| pwa_manifest | pwaManifest.shortName | string | true |
| pwa_manifest | pwaManifest.startUrl | string | true |
| qotd | qotd.quote | string | true |
| qualys | qualys.correlationID | string | true |
| radius | radius.attributes | string | true |
| radius | radius.calledStationId | string | true |
| radius | radius.code | numeric | true |
| radius | radius.codeID | string | true |
| radius | radius.identifier | string | true |
| radius | radius.nasIdentifier | string | true |
| radius | radius.replyMessage | string | true |
| rdp | rdp.auth.nla | string | true |
| rdp | rdp.auth.sspeua | string | true |
| rdp | rdp.auth.supportsNegotiation | numeric | true |
| rdp | rdp.auth.tls | string | true |
| rdp | rdp.failureCode | string | true |
| rdp | rdp.failureCodeName | string | true |
| rdp | rdp.features | string | true |
| rdp | rdp.flags | string | true |
| rdp | rdp.negotiation | string | true |
| rdp | rdp.ntlm.dnsComputer | string | true |
| rdp | rdp.ntlm.dnsDomain | string | true |
| rdp | rdp.ntlm.dnsTree | string | true |
| rdp | rdp.ntlm.netbiosComputer | string | true |
| rdp | rdp.ntlm.netbiosDomain | string | true |
| rdp | rdp.ntlm.osBuild | string | true |
| rdp | rdp.ntlm.osMajor | string | true |
| rdp | rdp.ntlm.osMinor | string | true |
| rdp | rdp.ntlm.osVersion | string | true |
| rdp | rdp.ntlm.serverChallenge | string | true |
| rdp | rdp.ntlm.targetName | string | true |
| rdp | rdp.securityLevel | string | true |
| rdp | rdp.selectedProtocol | string | true |
| rdp | rdp.selectedProtocolName | string | true |
| rdp | rdp.tls.fingerprintSHA256 | string | true |
| rdp | rdp.tls.issuer | string | true |
| rdp | rdp.tls.notAfter | string | true |
| rdp | rdp.tls.notBefore | string | true |
| rdp | rdp.tls.subject | string | true |
| redis | redis.archBits | numeric | true |
| redis | redis.authRequired | boolean | true |
| redis | redis.buildID | string | true |
| redis | redis.clusterEnabled | boolean | true |
| redis | redis.connectedClients | numeric | true |
| redis | redis.error | string | true |
| redis | redis.gccVersion | string | true |
| redis | redis.gitSHA1 | string | true |
| redis | redis.maxMemory | string | true |
| redis | redis.memAllocator | string | true |
| redis | redis.mode | string | true |
| redis | redis.os | string | true |
| redis | redis.ping | string | true |
| redis | redis.port | numeric | true |
| redis | redis.protectedMode | string | true |
| redis | redis.redisVersion | string | true |
| redis | redis.role | string | true |
| redis | redis.runID | string | true |
| redis | redis.totalCommands | string | true |
| redis | redis.totalConnections | string | true |
| redis | redis.uptime | numeric | true |
| redis | redis.usedMemory | string | true |
| redis | redis.valkeyVersion | string | true |
| redis | redis.version | string | true |
| riak | riak.nodename | string | true |
| riak | riak.version | string | true |
| riak-http | riak-http.version | string | true |
| rip | rip.auth | string | true |
| rip | rip.nextHop | string | false |
| rip | rip.route | string | false |
| rip | rip.routeCidr | string | false |
| rip | rip.routeCount | string | true |
| rip | rip.routingDomain | string | true |
| rip | rip.version | string | true |
| roomalert | roomalert.ipAddress | string | false |
| roomalert | roomalert.macAddress | string | false |
| roomalert | roomalert.model | string | false |
| roomalert | roomalert.osVersion | string | false |
| roomalert | roomalert.serialNumber | string | true |
| rpcbind | rpcbind.acceptState | string | true |
| rpcbind | rpcbind.acceptStatus | string | true |
| rpcbind | rpcbind.addrs | string | true |
| rpcbind | rpcbind.authStatus | string | true |
| rpcbind | rpcbind.error | string | true |
| rpcbind | rpcbind.mappingCount | numeric | true |
| rpcbind | rpcbind.mountd | string | true |
| rpcbind | rpcbind.nfs | string | true |
| rpcbind | rpcbind.nlockmgr | string | true |
| rpcbind | rpcbind.programEntries | string | true |
| rpcbind | rpcbind.programs | string | true |
| rpcbind | rpcbind.rejectStatus | string | true |
| rpcbind | rpcbind.replyStatus | string | true |
| rpcbind | rpcbind.transport | numeric | true |
| rpcbind | rpcbind.versionRange | string | true |
| rsync | rsync.banner | string | true |
| rsync | rsync.modules | string | true |
| rsync | rsync.service | string | true |
| rsync | rsync.version | string | true |
| rtmp | rtmp.version | string | true |
| rtsp | rtsp.banner | string | true |
| rtsp | rtsp.contentType | string | true |
| rtsp | rtsp.cseq | string | true |
| rtsp | rtsp.head.* | string | true |
| rtsp | rtsp.methodCount | numeric | true |
| rtsp | rtsp.methods | string | true |
| rtsp | rtsp.port | numeric | true |
| rtsp | rtsp.public | string | true |
| rtsp | rtsp.reasonPhrase | string | true |
| rtsp | rtsp.request.cseq | string | true |
| rtsp | rtsp.request.method | string | true |
| rtsp | rtsp.request.uri | string | true |
| rtsp | rtsp.server | string | true |
| rtsp | rtsp.session | string | true |
| rtsp | rtsp.statusClass | string | true |
| rtsp | rtsp.statusCode | string | true |
| rtsp | rtsp.statusName | string | true |
| rtsp | rtsp.target | string | true |
| rtsp | rtsp.transport | numeric | true |
| rtsp | rtsp.version | string | true |
| rtsp | rtsp.wwwAuthenticate | string | true |
| s7comm | s7comm.componentCount | numeric | true |
| s7comm | s7comm.components | string | true |
| s7comm | s7comm.copyright | string | true |
| s7comm | s7comm.cpuType | string | true |
| s7comm | s7comm.firmwareExtension | string | true |
| s7comm | s7comm.firmwareExtensionVersion | string | true |
| s7comm | s7comm.firmwareName | string | true |
| s7comm | s7comm.firmwareVersion | string | true |
| s7comm | s7comm.hardwareName | string | true |
| s7comm | s7comm.hardwareVersion | string | true |
| s7comm | s7comm.locationDesignation | string | true |
| s7comm | s7comm.memoryCardSerial | string | true |
| s7comm | s7comm.moduleName | string | true |
| s7comm | s7comm.moduleType | string | true |
| s7comm | s7comm.moduleTypeName | string | true |
| s7comm | s7comm.moduleVersion | string | true |
| s7comm | s7comm.plantDesignation | string | true |
| s7comm | s7comm.protocolVersion | string | true |
| s7comm | s7comm.serialNumber | string | true |
| s7comm | s7comm.systemName | string | true |
| sadp | sadp.activated | string | true |
| sadp | sadp.analogChannelNum | string | true |
| sadp | sadp.bootTime | string | true |
| sadp | sadp.cmdPort | string | true |
| sadp | sadp.deviceDesc | string | true |
| sadp | sadp.deviceSerial | string | true |
| sadp | sadp.deviceType | string | true |
| sadp | sadp.dhcp | string | true |
| sadp | sadp.digitalChannelNum | string | true |
| sadp | sadp.dspVersion | string | true |
| sadp | sadp.httpPort | string | true |
| sadp | sadp.ipv4.address | string | true |
| sadp | sadp.ipv4.gateway | string | true |
| sadp | sadp.ipv4.subnet | string | true |
| sadp | sadp.ipv6.address | string | true |
| sadp | sadp.ipv6.gateway | string | true |
| sadp | sadp.ipv6.maskLen | string | true |
| sadp | sadp.mac | string | true |
| sadp | sadp.oemInfo | string | true |
| sadp | sadp.passwordResetAbility | string | true |
| sadp | sadp.softwareVersion | string | true |
| sadp | sadp.uuid | string | true |
| sccp | sccp.deviceType | string | true |
| sccp | sccp.protocolVersion | string | true |
| sccp | sccp.rejected | string | true |
| securemote | securemote.hostname | string | true |
| securemote | securemote.server | string | true |
| servicetag | serviceTag.agentURN | string | true |
| servicetag | serviceTag.agentVersion | string | true |
| servicetag | serviceTag.registryVersion | string | true |
| servicetag | serviceTag.servicePort | string | true |
| servicetag | serviceTag.sysinfo.cpuInfo.name | string | true |
| servicetag | serviceTag.sysinfo.cpuMfg | string | true |
| servicetag | serviceTag.sysinfo.hostID | string | true |
| servicetag | serviceTag.sysinfo.hostname | string | true |
| servicetag | serviceTag.sysinfo.mfg | string | true |
| servicetag | serviceTag.sysinfo.platform | string | true |
| servicetag | serviceTag.sysinfo.release | string | true |
| servicetag | serviceTag.sysinfo.serialNumber | string | true |
| servicetag | serviceTag.sysinfo.system | string | true |
| servicetag | servicetag.cpuMfg | string | true |
| servicetag | servicetag.cpuName | string | true |
| servicetag | servicetag.hostid | string | true |
| servicetag | servicetag.hostname | string | true |
| servicetag | servicetag.manufacturer | string | true |
| servicetag | servicetag.platform | string | true |
| servicetag | servicetag.port | numeric | true |
| servicetag | servicetag.registryVersion | string | true |
| servicetag | servicetag.release | string | true |
| servicetag | servicetag.serial | string | true |
| servicetag | servicetag.system | string | true |
| servicetag | servicetag.urn | string | true |
| servicetag | servicetag.version | string | true |
| sgsap | sgsap.messageType | string | true |
| sgsap | sgsap.sgsCause | string | true |
| sip | sip.accept | string | true |
| sip | sip.allow | string | true |
| sip | sip.contact | string | true |
| sip | sip.head.* | string | true |
| sip | sip.local | string | true |
| sip | sip.port | numeric | true |
| sip | sip.reasonPhrase | string | true |
| sip | sip.server | string | true |
| sip | sip.statusCode | string | true |
| sip | sip.supported | numeric | true |
| sip | sip.target | string | true |
| sip | sip.userAgent | string | true |
| sip | sip.via | string | true |
| sip | sip.wwwAuthenticate | string | true |
| slp | slp.attributes | string | true |
| slp | slp.da.attributes | string | true |
| slp | slp.da.bootTimestamp | numeric | true |
| slp | slp.da.scopes | string | true |
| slp | slp.da.spi | string | true |
| slp | slp.da.url | string | true |
| slp | slp.error | string | true |
| slp | slp.errorCode | string | true |
| slp | slp.flags | string | true |
| slp | slp.function | string | true |
| slp | slp.functionID | string | true |
| slp | slp.language | string | true |
| slp | slp.length | numeric | true |
| slp | slp.nextExtensionOffset | string | true |
| slp | slp.port | numeric | true |
| slp | slp.sa.attributes | string | true |
| slp | slp.sa.scopes | string | true |
| slp | slp.sa.url | string | true |
| slp | slp.serviceAgentURL | string | true |
| slp | slp.serviceTypeCount | numeric | true |
| slp | slp.serviceTypes | string | true |
| slp | slp.serviceTypesRaw | string | true |
| slp | slp.target | string | true |
| slp | slp.urlCount | numeric | true |
| slp | slp.urls | string | true |
| slp | slp.version | string | true |
| slp | slp.xid | string | true |
| smb | smb.accessControl | string | true |
| smb | smb.bootTime | string | true |
| smb | smb.bootTimeTS | string | true |
| smb | smb.capabilities | string | true |
| smb | smb.cipherAlg | string | false |
| smb | smb.cipherAlgCnt | numeric | true |
| smb | smb.compAlg | string | false |
| smb | smb.compAlgCnt | numeric | true |
| smb | smb.compFlags | string | true |
| smb | smb.dialect | string | true |
| smb | smb.dialectIndex | string | true |
| smb | smb.dialectName | string | true |
| smb | smb.dialectRevision | string | true |
| smb | smb.dnsComputer | string | true |
| smb | smb.dnsDomain | string | true |
| smb | smb.dnsTree | string | true |
| smb | smb.guid | string | true |
| smb | smb.hashAlg | string | false |
| smb | smb.hashAlgCnt | numeric | true |
| smb | smb.hashSaltLen | string | true |
| smb | smb.maxReadSize | string | true |
| smb | smb.maxTransactSize | string | true |
| smb | smb.maxWriteSize | string | true |
| smb | smb.nativeLM | string | true |
| smb | smb.nativeOS | string | true |
| smb | smb.negCtxCnt | numeric | true |
| smb | smb.netName | string | true |
| smb | smb.netbiosComputer | string | true |
| smb | smb.netbiosDomain | string | true |
| smb | smb.ntStatus | string | true |
| smb | smb.ntlm.serverChallenge | string | true |
| smb | smb.ntlmssp | string | true |
| smb | smb.ntlmsspNegFlags | string | true |
| smb | smb.ntlmsspVersion | string | true |
| smb | smb.posixExtensions | string | true |
| smb | smb.rdmaTransformCnt | numeric | true |
| smb | smb.rdmaTransforms | string | false |
| smb | smb.securityMode | string | true |
| smb | smb.serverGUID | string | true |
| smb | smb.sessionID | string | true |
| smb | smb.signing | string | true |
| smb | smb.signingAlg | string | false |
| smb | smb.signingAlgCnt | numeric | true |
| smb | smb.signingEnabled | boolean | true |
| smb | smb.signingRequired | boolean | true |
| smb | smb.supportsEncryptedPasswords | numeric | true |
| smb | smb.timestamp | numeric | true |
| smb | smb.timestampTS | numeric | true |
| smb | smb.transportSecurity | numeric | true |
| smb | smb.version | string | true |
| smb3 | ntlmssp.dnsComputer | string | true |
| smb3 | ntlmssp.dnsDomain | string | true |
| smb3 | ntlmssp.negFlags | string | true |
| smb3 | ntlmssp.netbiosComputer | string | true |
| smb3 | ntlmssp.netbiosDomain | string | true |
| smb3 | ntlmssp.ntlmRevision | numeric | true |
| smb3 | ntlmssp.targetName | string | true |
| smb3 | ntlmssp.version | string | true |
| smb3 | ntlmssp.versionInvalid | string | true |
| smb3 | smb.accessControl | string | true |
| smb3 | smb.capabilities | string | true |
| smb3 | smb.cipherAlg | string | false |
| smb3 | smb.cipherAlgCnt | string | true |
| smb3 | smb.compAlg | string | false |
| smb3 | smb.compAlgCnt | string | true |
| smb3 | smb.compFlags | numeric | true |
| smb3 | smb.dialect | string | true |
| smb3 | smb.guid | string | true |
| smb3 | smb.hashAlg | string | false |
| smb3 | smb.hashAlgCnt | string | true |
| smb3 | smb.hashSaltLen | string | true |
| smb3 | smb.nativeLM | string | true |
| smb3 | smb.nativeOS | string | true |
| smb3 | smb.netName | string | true |
| smb3 | smb.netbiosComputer | string | true |
| smb3 | smb.netbiosDomain | string | true |
| smb3 | smb.posixExtensions | string | true |
| smb3 | smb.rdmaTransformCnt | string | true |
| smb3 | smb.rdmaTransforms | string | false |
| smb3 | smb.sessionID | string | true |
| smb3 | smb.signing | string | true |
| smb3 | smb.signingAlg | string | false |
| smb3 | smb.signingAlgCnt | string | true |
| smb3 | smb.supportsEncryptedPasswords | string | true |
| smb3 | smb.transportSecurity | string | true |
| smpp | smpp.commandID | string | true |
| smpp | smpp.commandStatus | string | true |
| smpp | smpp.interfaceVersion | string | true |
| smpp | smpp.product | string | true |
| smpp | smpp.systemID | string | true |
| smpp | smpp.vendor | string | true |
| smtp | smtp.authMethods | string | true |
| smtp | smtp.banner | string | true |
| smtp | smtp.eightBitMime | string | true |
| smtp | smtp.enhancedStatusCodes | string | true |
| smtp | smtp.esmtp | string | true |
| smtp | smtp.extensions | string | true |
| smtp | smtp.hostname | string | true |
| smtp | smtp.maxSize | string | true |
| smtp | smtp.pipelining | string | true |
| smtp | smtp.startTLS | string | true |
| smtp | smtp.statusCode | string | true |
| snmp | snmp._secrets | string | true |
| snmp | snmp.a10.softwareVersion | string | true |
| snmp | snmp.arpCount | numeric | true |
| snmp | snmp.arpcache | string | true |
| snmp | snmp.arpcache.oids | string | false |
| snmp | snmp.arpcache.ports | numeric | false |
| snmp | snmp.cdpCapabilities | string | true |
| snmp | snmp.cdpDeviceIDs | string | true |
| snmp | snmp.cdpIPs | string | true |
| snmp | snmp.cdpNeighborCount | numeric | true |
| snmp | snmp.cdpPlatforms | string | true |
| snmp | snmp.cdpPortIDs | string | true |
| snmp | snmp.cisco.hardware | string | true |
| snmp | snmp.cisco.hardwareRev | string | true |
| snmp | snmp.cisco.softwareVersion | string | true |
| snmp | snmp.community | string | true |
| snmp | snmp.credentials | string | true |
| snmp | snmp.defaultCommunities | string | true |
| snmp | snmp.engineBoots | numeric | true |
| snmp | snmp.engineID.enterpriseID | string | true |
| snmp | snmp.engineID.raw | string | true |
| snmp | snmp.engineID.vendor | string | true |
| snmp | snmp.engineTime | string | true |
| snmp | snmp.errorIndex | string | true |
| snmp | snmp.errorStatus | string | true |
| snmp | snmp.errorStatusName | string | true |
| snmp | snmp.extendOsReleaseFull | string | true |
| snmp | snmp.f5.hardware | string | true |
| snmp | snmp.f5.softwareBuild | string | true |
| snmp | snmp.f5.softwareVersion | string | true |
| snmp | snmp.failedAuth | string | true |
| snmp | snmp.fortinet.fgSysVersion | string | true |
| snmp | snmp.fortinet.fnSysSerial | string | true |
| snmp | snmp.fortinet.fnSysVersion | string | true |
| snmp | snmp.hostname | string | true |
| snmp | snmp.ifCount | numeric | true |
| snmp | snmp.inauthentic | string | true |
| snmp | snmp.installedSWErr | string | true |
| snmp | snmp.installedSWHWHint | string | true |
| snmp | snmp.installedSWOSHint | string | true |
| snmp | snmp.installedSWProtoVer | string | true |
| snmp | snmp.installedSoftware | string | true |
| snmp | snmp.installedSoftwareCount | numeric | true |
| snmp | snmp.interfaceAddrs | string | true |
| snmp | snmp.interfaceAddrsMap | string | true |
| snmp | snmp.interfaceAliases | string | true |
| snmp | snmp.interfaceAliasesMap | string | true |
| snmp | snmp.interfaceCount | numeric | true |
| snmp | snmp.interfaceMacs | string | true |
| snmp | snmp.interfaceMacsMap | string | true |
| snmp | snmp.interfaceNames | string | true |
| snmp | snmp.interfaceNamesMap | string | true |
| snmp | snmp.interfaces | string | true |
| snmp | snmp.ivanti.esapVersion | string | true |
| snmp | snmp.ivanti.productName | string | true |
| snmp | snmp.ivanti.productVersion | string | true |
| snmp | snmp.juniper.serialNumbers | string | true |
| snmp | snmp.juniper.softwareVersion | string | true |
| snmp | snmp.juniperModel | string | true |
| snmp | snmp.lldp.neighbor | string | false |
| snmp | snmp.lldpChassisIDTypes | string | true |
| snmp | snmp.lldpChassisIDs | string | true |
| snmp | snmp.lldpNeighborCount | numeric | true |
| snmp | snmp.lldpPortDescs | numeric | true |
| snmp | snmp.lldpPortIDs | numeric | true |
| snmp | snmp.lldpPortNums | numeric | true |
| snmp | snmp.lldpSysDescrs | string | true |
| snmp | snmp.lldpSysNames | string | true |
| snmp | snmp.macs.ports | numeric | true |
| snmp | snmp.macs.vlans | string | true |
| snmp | snmp.modelNames | string | true |
| snmp | snmp.msgMaxSize | string | true |
| snmp | snmp.pan.appDatabaseVersion | string | true |
| snmp | snmp.pan.avDatabaseVersion | string | true |
| snmp | snmp.pan.hardwareVersion | string | true |
| snmp | snmp.pan.serialNumber | string | true |
| snmp | snmp.pan.softwareVersion | string | true |
| snmp | snmp.pan.threatDatabaseVersion | string | true |
| snmp | snmp.pan.urlDatabaseVersion | string | true |
| snmp | snmp.pan.vpnClientVersion | string | true |
| snmp | snmp.port | numeric | true |
| snmp | snmp.routeCount | numeric | true |
| snmp | snmp.routes | string | true |
| snmp | snmp.secretCommunities | string | true |
| snmp | snmp.serialNumbers | string | true |
| snmp | snmp.sonicwall.hardware | string | true |
| snmp | snmp.sonicwall.serialNumber | string | true |
| snmp | snmp.sonicwall.softwareVersion | string | true |
| snmp | snmp.sophos.ha.peer | string | true |
| snmp | snmp.sophos.ha.status | string | true |
| snmp | snmp.sophos.hardware | string | true |
| snmp | snmp.sophos.softwareVersion | string | true |
| snmp | snmp.sysContact | string | true |
| snmp | snmp.sysDesc | string | true |
| snmp | snmp.sysDescr | string | true |
| snmp | snmp.sysLocation | string | true |
| snmp | snmp.sysName | string | true |
| snmp | snmp.sysObjectID | string | true |
| snmp | snmp.sysServices | string | true |
| snmp | snmp.sysUpTimeFormatted | string | true |
| snmp | snmp.sysUptime | string | true |
| snmp | snmp.sysUptimeFormatted | string | true |
| snmp | snmp.target | string | true |
| snmp | snmp.username | string | true |
| snmp | snmp.usmStatsDecryptionErrors | string | true |
| snmp | snmp.usmStatsNotInTimeWindows | string | true |
| snmp | snmp.usmStatsUnknownEngineIDs | string | true |
| snmp | snmp.usmStatsUnknownUserNames | string | true |
| snmp | snmp.usmStatsUnsupportedSecLevels | numeric | true |
| snmp | snmp.usmStatsWrongDigests | numeric | true |
| snmp | snmp.varbindCount | numeric | true |
| snmp | snmp.version | string | true |
| snmp | snmp.versionCode | string | true |
| snmp | snmp.vlanCount | numeric | true |
| snmp | snmp.vlans | string | true |
| snpp | snpp.banner | string | true |
| socks4 | socks4.anonymousAccess | string | true |
| socks4 | socks4.status | string | true |
| socks5 | socks5.authMethod | string | true |
| socks5 | socks5.authRequired | boolean | true |
| socks5 | socks5.noAcceptable | string | true |
| socks5 | socks5.open | string | true |
| socks5 | socks5.socks4 | string | true |
| socks5 | socks5.version | string | true |
| solr | service.product | string | true |
| solr | service.version | string | true |
| solr | solr.jvm.name | string | true |
| solr | solr.jvm.version | string | true |
| solr | solr.lucene.version | string | true |
| solr | solr.system.arch | string | true |
| solr | solr.system.name | string | true |
| solr | solr.system.version | string | true |
| solr | solr.version | string | true |
| splunk | splunk.build | string | true |
| splunk | splunk.version | string | true |
| spotify-connect | brandDisplayName | string | true |
| spotify-connect | clientID | string | true |
| spotify-connect | deviceID | string | true |
| spotify-connect | deviceType | string | true |
| spotify-connect | modelDisplayName | string | true |
| spotify-connect | remoteName | string | true |
| spotify-connect | scope | string | true |
| spotify-connect | status | string | true |
| spotify-connect | statusString | string | true |
| ssh | ssh.authMethods | string | false |
| ssh | ssh.banner | string | true |
| ssh | ssh.comments | numeric | true |
| ssh | ssh.error | string | true |
| ssh | ssh.exitStatus | string | true |
| ssh | ssh.extensionNames | string | true |
| ssh | ssh.extensions | string | false |
| ssh | ssh.firstKexFollows | string | true |
| ssh | ssh.hostKey | string | true |
| ssh | ssh.hostKey.bkhash | string | true |
| ssh | ssh.hostKey.data | string | true |
| ssh | ssh.hostKey.md5 | string | true |
| ssh | ssh.hostKey.sha256 | string | true |
| ssh | ssh.hostKeyAlgs | string | true |
| ssh | ssh.hostKeyCount | numeric | true |
| ssh | ssh.hostKeyTypes | string | false |
| ssh | ssh.kbdInstructions | string | true |
| ssh | ssh.kbdName | string | true |
| ssh | ssh.kbdQuestion | string | true |
| ssh | ssh.kexAlgs | string | true |
| ssh | ssh.kexCookie | string | true |
| ssh | ssh.kexPadding | string | true |
| ssh | ssh.preAuthBanner | string | true |
| ssh | ssh.protoVersion | string | true |
| ssh | ssh.service | string | true |
| ssh | ssh.sessionMethod | string | true |
| ssh | ssh.sessionOutput | string | true |
| ssh | ssh.softwareVersion | string | true |
| ssh | ssh.stage | string | true |
| ssh | ssh.toClientCiphers | string | true |
| ssh | ssh.toClientCompression | string | true |
| ssh | ssh.toClientComps | string | true |
| ssh | ssh.toClientLangs | string | true |
| ssh | ssh.toClientMACs | string | true |
| ssh | ssh.toServerCiphers | string | true |
| ssh | ssh.toServerCompression | string | true |
| ssh | ssh.toServerComps | string | true |
| ssh | ssh.toServerLangs | string | true |
| ssh | ssh.toServerMACs | string | true |
| ssh | ssh.version | string | true |
| sstp | sstp.server | string | true |
| sstp | sstp.vendor | string | true |
| steam | steam.authKeyIDs | string | true |
| steam | steam.broadcastingActive | string | true |
| steam | steam.clientID | string | true |
| steam | steam.connectPort | string | true |
| steam | steam.contentCachePort | string | true |
| steam | steam.deviceID | string | true |
| steam | steam.downloadLANPeerGroup | string | true |
| steam | steam.eUniverse | string | true |
| steam | steam.enabledServices | string | true |
| steam | steam.gamesRunning | string | true |
| steam | steam.hostname | string | true |
| steam | steam.instanceID | string | true |
| steam | steam.ipAddresses | string | true |
| steam | steam.is64Bit | string | true |
| steam | steam.isSteamDeck | string | true |
| steam | steam.macAddresses | string | true |
| steam | steam.minVersion | string | true |
| steam | steam.osType | string | true |
| steam | steam.publicIPAddress | string | true |
| steam | steam.remotePlayActive | string | true |
| steam | steam.screenLocked | string | true |
| steam | steam.steamIDs | string | true |
| steam | steam.steamVersion | string | true |
| steam | steam.supportedServices | string | true |
| steam | steam.timestamp | string | true |
| steam | steam.version | string | true |
| steam | steam.vrActive | string | true |
| stun | stun.attributeCount | numeric | true |
| stun | stun.attributes | string | true |
| stun | stun.errorCode | string | true |
| stun | stun.errorReason | string | true |
| stun | stun.fingerprint | string | true |
| stun | stun.mappedAddress | string | true |
| stun | stun.mappedIP | string | true |
| stun | stun.mappedPort | numeric | true |
| stun | stun.messageClass | string | true |
| stun | stun.messageLength | string | true |
| stun | stun.messageMethod | string | true |
| stun | stun.otherAddress | string | true |
| stun | stun.responseOrigin | string | true |
| stun | stun.software | string | true |
| stun | stun.transactionID | string | true |
| stun | stun.type | string | true |
| stun | stun.xorMappedAddress | string | true |
| sua | sua.errorCode | string | true |
| sua | sua.infoString | string | true |
| sua | sua.messageClass | string | true |
| sua | sua.messageType | string | true |
| sunrpc | rpcbind.mappingCount | string | true |
| sunrpc | rpcbind.mountd | string | true |
| sunrpc | rpcbind.nfs | string | true |
| sunrpc | rpcbind.programs | string | true |
| svn | svn.authMechanisms | string | true |
| svn | svn.banner | string | true |
| svn | svn.capabilities | string | true |
| svn | svn.maxVersion | string | true |
| svn | svn.minVersion | string | true |
| svn | svn.repoURL | string | true |
| sybase | sybase.target | string | true |
| sybase | sybase.version | string | true |
| syslog | syslog.appName | string | true |
| syslog | syslog.facility | string | true |
| syslog | syslog.facilityName | string | true |
| syslog | syslog.hostname | string | true |
| syslog | syslog.priority | string | true |
| syslog | syslog.rfc | string | true |
| syslog | syslog.severity | string | true |
| syslog | syslog.severityName | string | true |
| syslog | syslog.version | string | true |
| tcp | banner | string | true |
| tcp | data | string (hex-encoded) | true |
| tcp | tcp.flags | string | false |
| tcp | tcp.options | numeric | true |
| tcp | tcp.ts | numeric | true |
| tcp | tcp.urg | numeric | true |
| tcp | tcp.win | numeric | true |
| teamviewer | teamviewer.command | string | true |
| teamviewer | teamviewer.magic | string | true |
| teamviewer | teamviewer.response | string (hex-encoded) | true |
| telnet | telnet.banner | string | true |
| telnet | telnet.do | string | true |
| telnet | telnet.doText | string | true |
| telnet | telnet.dont | string | true |
| telnet | telnet.dontText | string | true |
| telnet | telnet.hasIAC | string | true |
| telnet | telnet.hasLogin | string | true |
| telnet | telnet.hasPassword | string | true |
| telnet | telnet.will | string | true |
| telnet | telnet.willText | string | true |
| telnet | telnet.wont | string | true |
| telnet | telnet.wontText | string | true |
| tftp | tftp.banner | string | true |
| tftp | tftp.error | string | true |
| tftp | tftp.example.test | string | true |
| tftp | tftp.message | string | true |
| tftp | tftp.mode | string | true |
| tftp | tftp.opcode | string | true |
| tftp | tftp.rrq.filename | string | true |
| tftp | tftp.wrq.filename | string | true |
| time | time.skew | string | true |
| time | time.skewMS | string | true |
| time | time.timestamp | numeric | true |
| time | time.value | string | true |
| tls | tls.alert | string | true |
| tls | tls.alertDescription | string | true |
| tls | tls.alertLevel | string | true |
| tls | tls.alpn | string | true |
| tls | tls.authorityKeyID | string | true |
| tls | tls.caUnknown | string | true |
| tls | tls.certificate | string | true |
| tls | tls.certificateCount | numeric | true |
| tls | tls.certificateParseError | string | true |
| tls | tls.certificates | string | true |
| tls | tls.chainFingerprints | numeric | true |
| tls | tls.cipher | string | true |
| tls | tls.cipherName | string | true |
| tls | tls.cipherSuiteNames | string | true |
| tls | tls.cipherSuites | string | true |
| tls | tls.cn | string | true |
| tls | tls.compression | string | true |
| tls | tls.crl | string | false |
| tls | tls.emails | string | false |
| tls | tls.errors | string | true |
| tls | tls.expired | string | true |
| tls | tls.extensionNames | string | true |
| tls | tls.extensions | string | true |
| tls | tls.fp.bkhash | string | true |
| tls | tls.fp.caSha1 | string | false |
| tls | tls.fp.sha1 | string | true |
| tls | tls.fp.sha1Hex | string | true |
| tls | tls.fp.sha256 | string | true |
| tls | tls.helloVersion | string | true |
| tls | tls.hostTime | string | true |
| tls | tls.hostTimeTS | numeric | true |
| tls | tls.issuer | string | true |
| tls | tls.issuingURL | string | false |
| tls | tls.names | string | false |
| tls | tls.negotiationError | string | true |
| tls | tls.notAfter | string | true |
| tls | tls.notAfterTS | numeric | true |
| tls | tls.notBefore | string | true |
| tls | tls.notBeforeTS | numeric | true |
| tls | tls.ocsp | string | false |
| tls | tls.ocspResponse | string | true |
| tls | tls.port | numeric | true |
| tls | tls.pqHybridKeyExchangeCodes | string | false |
| tls | tls.pqHybridKeyExchangeNames | string | false |
| tls | tls.publicKeyAlgorithm | string | true |
| tls | tls.random | string | true |
| tls | tls.requiresClientCertificate | string | true |
| tls | tls.rzfp | string | true |
| tls | tls.rzfp0 | string | true |
| tls | tls.sans | string | true |
| tls | tls.selfSigned | string | true |
| tls | tls.serial | string | true |
| tls | tls.sessionID | string | true |
| tls | tls.signatureAlgorithm | string | true |
| tls | tls.stack | string | true |
| tls | tls.subject | string | true |
| tls | tls.subjectKeyID | string | true |
| tls | tls.supportedVersionCodes | string | true |
| tls | tls.supportedVersionNames | string | false |
| tls | tls.supportedVersions | string | false |
| tls | tls.target | string | true |
| tls | tls.uri | string | false |
| tls | tls.version | string | true |
| tls | tls.versionName | string | true |
| turn | turn.attributeCount | numeric | true |
| turn | turn.attributes | string | true |
| turn | turn.errorCode | string | true |
| turn | turn.errorReason | string | true |
| turn | turn.fingerprint | string | true |
| turn | turn.lifetime | string | true |
| turn | turn.mappedAddress | string | true |
| turn | turn.mappedIP | string | true |
| turn | turn.mappedPort | numeric | true |
| turn | turn.messageClass | string | true |
| turn | turn.messageMethod | string | true |
| turn | turn.nonce | string | true |
| turn | turn.realm | string | true |
| turn | turn.relayedIP | string | true |
| turn | turn.relayedPort | numeric | true |
| turn | turn.requestedTransport | numeric | true |
| turn | turn.software | string | true |
| turn | turn.type | string | true |
| turn | turn.xorMappedAddress | string | true |
| turn | turn.xorRelayedAddress | string | true |
| ubnt | ubnt.addrs | string | false |
| ubnt | ubnt.configStatus | string | true |
| ubnt | ubnt.directConnectDomain | string | true |
| ubnt | ubnt.essid | string | true |
| ubnt | ubnt.firmware | string | true |
| ubnt | ubnt.hostName | string | true |
| ubnt | ubnt.interfaceMap | string | false |
| ubnt | ubnt.macs | string | false |
| ubnt | ubnt.modelFull | string | true |
| ubnt | ubnt.modelShort | string | true |
| ubnt | ubnt.protoVersion | string | true |
| ubnt | ubnt.sourceMAC | string | false |
| ubnt | ubnt.unifiVersion | string | true |
| ubnt | ubnt.uptime | string | true |
| ubnt | ubnt.webMgmtPort | string | true |
| ubnt | ubnt.webMgmtTLS | string | true |
| ubnt | ubnt.wmode | string | false |
| unitronics | unitronics.cpe | string | true |
| unitronics | unitronics.hwVersion | string | true |
| unitronics | unitronics.model | string | true |
| unitronics | unitronics.osVersion | string | true |
| unitronics | unitronics.unitID | string | true |
| upnp | upnp.controlURL | string | true |
| upnp | upnp.deviceType | string | true |
| upnp | upnp.eventSubURL | string | true |
| upnp | upnp.friendlyName | string | true |
| upnp | upnp.manufacturer | string | true |
| upnp | upnp.manufacturerURL | string | true |
| upnp | upnp.modelDescription | string | true |
| upnp | upnp.modelName | string | true |
| upnp | upnp.modelNumber | string | true |
| upnp | upnp.modelURL | string | true |
| upnp | upnp.presentationURL | string | true |
| upnp | upnp.scpdURL | string | true |
| upnp | upnp.serialNumber | string | true |
| upnp | upnp.udn | string | true |
| upnp | upnp.upc | string | true |
| upnp | upnp.url | string | true |
| upnp | upnp.urlBase | string | true |
| upnp | upnp.wifiMac | string | true |
| upnp | upnp.wiredMac | string | true |
| uscan | uscan.makeAndModel | string | true |
| uscan | uscan.manufacturer | string | true |
| uscan | uscan.serialNumber | string | true |
| uscan | uscan.version | string | true |
| vault | vault.version | string | true |
| vmware | http.vmware.thumbprint | string | true |
| vmware | service.product | string | true |
| vmware | service.vendor | string | true |
| vmware | service.version | string | true |
| vmware | vmware.apiType | string | true |
| vmware | vmware.apiVersion | string | true |
| vmware | vmware.build | string | true |
| vmware | vmware.fullName | string | true |
| vmware | vmware.name | string | true |
| vmware | vmware.osType | string | true |
| vmware | vmware.productLineID | string | true |
| vmware | vmware.version | string | true |
| vnc | vnc.banner | string | true |
| vnc | vnc.desktopName | string | true |
| vnc | vnc.error | string | true |
| vnc | vnc.framebufferHeight | string | true |
| vnc | vnc.framebufferWidth | string | true |
| vnc | vnc.majorVersion | string | true |
| vnc | vnc.minorVersion | string | true |
| vnc | vnc.noAuth | string | true |
| vnc | vnc.securityTypeCount | numeric | true |
| vnc | vnc.securityTypes | string | true |
| vnc | vnc.version | string | true |
| wbsm | wbsm.active | string | true |
| webmin | webmin.port | string | true |
| webmin | webmin.scheme | string | true |
| webmin | webmin.server | string | true |
| wireguard | wireguard.confidence | string | true |
| wireguard | wireguard.detection | string | true |
| wireguard | wireguard.payloadLength | string | true |
| wireguard | wireguard.receiverIndex | string | true |
| wireguard | wireguard.receiverIndexHex | string | true |
| wireguard | wireguard.receiverIndexMatches | string | true |
| wireguard | wireguard.responseType | string | true |
| wireguard | wireguard.responseTypeName | string | true |
| wireguard | wireguard.senderIndex | string | true |
| wireguard | wireguard.senderIndexHex | string | true |
| wiznet | wiznet.fields | string | true |
| wsd | wsd.addrs | string | false |
| wsd | wsd.types | string | true |
| wsman | wsman.body | string | true |
| x11 | x11.accessGranted | string | true |
| x11 | x11.anonymousAccess | string | true |
| x11 | x11.displayNumber | string | true |
| x11 | x11.failureReason | string | true |
| x11 | x11.status | string | true |
| x11 | x11.vendor | string | true |
| x11 | x11.version | string | true |
| x2ap | x2ap.criticality | string | true |
| x2ap | x2ap.messageType | string | true |
| x2ap | x2ap.procedureCode | string | true |
| xdmcp | xdmcp.authName | string | true |
| xdmcp | xdmcp.hostname | string | true |
| xdmcp | xdmcp.opcode | string | true |
| xdmcp | xdmcp.status | string | true |
| xdmcp | xdmcp.version | string | true |
| xmpp | xmpp.authMechanisms | string | true |
| xmpp | xmpp.banner | string | true |
| xmpp | xmpp.capsHash | string | true |
| xmpp | xmpp.capsNode | string | true |
| xmpp | xmpp.capsVersion | string | true |
| xmpp | xmpp.compression | string | true |
| xmpp | xmpp.cpe | string | true |
| xmpp | xmpp.port | numeric | true |
| xmpp | xmpp.serverFrom | string | true |
| xmpp | xmpp.serverSoftware | string | true |
| xmpp | xmpp.streamID | string | true |
| xmpp | xmpp.target | string | true |
| xmpp | xmpp.tlsSupport | numeric | true |
| zabbix | zabbix.agentData | string | true |
| zabbix | zabbix.agentVersion | string | true |
| zabbix | zabbix.cpe23 | string | true |
| zabbix | zabbix.remoteCommandsEnabled | boolean | true |
| zabbix | zabbix.version | string | true |
| zabbix-agent | zabbix.agentVersion | string | true |
| zebra | host.name | string | true |
| zebra | zebra.deviceName | string | false |
| zebra | zebra.firmware | string | false |
| zebra | zebra.ip | string | false |
| zebra | zebra.model | string | false |
| zebra | zebra.response | string | false |
| zebra | zebra.serial | string | false |
| zookeeper | zk.access | string | true |
| zookeeper | zookeeper.access | string | true |
| zookeeper | zookeeper.banner | string | true |
| zookeeper | zookeeper.connections | numeric | true |
| zookeeper | zookeeper.imok | string | true |
| zookeeper | zookeeper.mode | string | true |
| zookeeper | zookeeper.nodeCount | numeric | true |
| zookeeper | zookeeper.port | numeric | true |
| zookeeper | zookeeper.restricted | string | true |
| zookeeper | zookeeper.restrictionReason | string | true |
| zookeeper | zookeeper.ruok | string | true |
| zookeeper | zookeeper.srvr | string | true |
| zookeeper | zookeeper.target | string | true |
| zookeeper | zookeeper.version | string | true |
| zookeeper | zookeeper.versionRaw | string | true |
| zyxel | zyxel.builddate | string | true |
| zyxel | zyxel.dhcpstate | string | true |
| zyxel | zyxel.firmware | string | true |
| zyxel | zyxel.firstlogin | string | true |
| zyxel | zyxel.gateway | string | true |
| zyxel | zyxel.hostname | string | true |
| zyxel | zyxel.ip | string | true |
| zyxel | zyxel.mac | string | true |
| zyxel | zyxel.maxport | string | true |
| zyxel | zyxel.model | string | true |
| zyxel | zyxel.subnetmask | string | true |
| zyxel | zyxel.uptime | string | true |