IdsEventFlowData (type)

{
  "additionalProperties": false, 
  "description": "IDS event flow data specific to each IDS event. The data includes source ip, source port, destination ip, destination port, and protocol.", 
  "id": "IdsEventFlowData", 
  "module_id": "IDSMetrics", 
  "properties": {
    "client_ip": {
      "description": "IP address of the VM that initiated the communication.", 
      "readonly": true, 
      "required": false, 
      "title": "IP address of the client VM", 
      "type": "string"
    }, 
    "destination_ip": {
      "description": "IP address of the destination VM on the intrusion flow.", 
      "readonly": true, 
      "required": false, 
      "title": "IP address of the destination VM", 
      "type": "string"
    }, 
    "destination_port": {
      "description": "Port on the destination VM where the traffic was sent to.", 
      "readonly": true, 
      "required": false, 
      "title": "Destination port", 
      "type": "integer"
    }, 
    "local_vm_ip": {
      "description": "IP address of VM on the host where IDS engine is running.", 
      "readonly": true, 
      "required": false, 
      "title": "IP address of the local VM", 
      "type": "string"
    }, 
    "protocol": {
      "description": "Traffic protocol pertaining to the detected intrusion, could be TCP/UDP etc.", 
      "readonly": true, 
      "required": false, 
      "title": "Traffic protocol pertaining to the intrusion", 
      "type": "string"
    }, 
    "source_ip": {
      "description": "IP address of the source VM on the intrusion flow.", 
      "readonly": true, 
      "required": false, 
      "title": "IP address of the source VM", 
      "type": "string"
    }, 
    "source_port": {
      "description": "Source port through which traffic was initiated that caused the intrusion to be detected.", 
      "readonly": true, 
      "required": false, 
      "title": "Source port", 
      "type": "integer"
    }
  }, 
  "title": "IDS event flow data", 
  "type": "object"
}