IdsEventFlowData (schema)

IDS event flow data

IDS event flow data specific to each IDS
event. The data includes source ip, source
port, destination ip, destination port, and
protocol.
Name Description Type Notes
client_ip IP address of the client VM

IP address of the VM that initiated the communication.
string Readonly
destination_ip IP address of the destination VM

IP address of the destination VM on the intrusion flow.
string Readonly
destination_port Destination port

Port on the destination VM where the traffic was sent to.
integer Readonly
local_vm_ip IP address of the local VM

IP address of VM on the host where IDS engine is running.
string Readonly
protocol Traffic protocol pertaining to the intrusion

Traffic protocol pertaining to the detected intrusion, could be TCP/UDP etc.
string Readonly
source_ip IP address of the source VM

IP address of the source VM on the intrusion flow.
string Readonly
source_port Source port

Source port through which traffic was initiated that caused the intrusion to be detected.
integer Readonly