Grouped fields are aliases for groups of related UDM fields. All fields grouped together are of type string.
| JSON representation |
|---|
{ "ip" : [ string ] , "domain" : [ string ] , "hostname" : [ string ] , "user" : [ string ] , "email" : [ string ] , "filePath" : [ string ] , "hash" : [ string ] , "processId" : [ string ] } |
| Fields | |
|---|---|
ip[]
|
IP addresses. |
domain[]
|
Domains. |
hostname[]
|
Hostnames. |
user[]
|
Users. |
email[]
|
Emails. |
filePath[]
|
File paths. |
hash[]
|
File Hashes. |
processId[]
|
Process Identifiers. |
