Skip to content
Cloudflare Docs

Gateway Network

The descriptions below detail the fields available for gateway_network.

AccountID

Section titled “AccountID”

Type: string

Cloudflare account tag.

Action

Section titled “Action”

Type: string

Action performed by gateway on the session.

ApplicationIDs

Section titled “ApplicationIDs”

Type: array[int]

IDs of the applications that matched the session parameters.

ApplicationNames

Section titled “ApplicationNames”

Type: array[string]

Names of the applications that matched the session parameters.

CategoryIDs

Section titled “CategoryIDs”

Type: array[int]

IDs of the categories that matched the session parameters.

CategoryNames

Section titled “CategoryNames”

Type: array[string]

Names of the categories that matched the session parameters.

Datetime

Section titled “Datetime”

Type: int or string

The date and time the corresponding network session was made (for example, '2021-07-27T00:01:07Z').

DestinationIP

Section titled “DestinationIP”

Type: string

Destination IP of the network session.

DestinationIPContinentCode

Section titled “DestinationIPContinentCode”

Type: string

Continent code of the destination IP of the network session (for example, 'NA').

DestinationIPCountryCode

Section titled “DestinationIPCountryCode”

Type: string

Country code of the destination IP of the network session (for example, 'US').

DestinationPort

Section titled “DestinationPort”

Type: int

Destination port of the network session.

DetectedProtocol

Section titled “DetectedProtocol”

Type: string

Detected traffic protocol of the network session.

DeviceID

Section titled “DeviceID”

Type: string

UUID of the device where the network session originated from.

DeviceName

Section titled “DeviceName”

Type: string

The name of the device where the HTTP request originated from (for example, 'Laptop MB810').

Email

Section titled “Email”

Type: string

Email associated with the user identity where the network session originated from.

OverrideIP

Section titled “OverrideIP”

Type: string

Overridden IP of the network session, if any.

OverridePort

Section titled “OverridePort”

Type: int

Overridden port of the network session, if any.

PolicyID

Section titled “PolicyID”

Type: string

Identifier of the policy/rule that was applied, if any.

PolicyName

Section titled “PolicyName”

Type: string

The name of the gateway policy applied to the request, if any.

ProxyEndpoint

Section titled “ProxyEndpoint”

Type: string

The proxy endpoint used on this network session, if any.

RegistrationID

Section titled “RegistrationID”

Type: string

The UUID of the device registration from which the network session originated.

SNI

Section titled “SNI”

Type: string

Content of the SNI for the TLS network session, if any.

SessionID

Section titled “SessionID”

Type: string

The session identifier of this network session.

SourceIP

Section titled “SourceIP”

Type: string

Source IP of the network session.

SourceIPContinentCode

Section titled “SourceIPContinentCode”

Type: string

Continent code of the source IP of the network session (for example, 'NA').

SourceIPCountryCode

Section titled “SourceIPCountryCode”

Type: string

Country code of the source IP of the network session (for example, 'US').

SourceInternalIP

Section titled “SourceInternalIP”

Type: string

Local LAN IP of the device. Only available when connected via a GRE/IPsec tunnel on-ramp.

SourcePort

Section titled “SourcePort”

Type: int

Source port of the network session.

Transport (deprecated)

Section titled “Transport (deprecated)”

Type: string

Transport protocol used for this session.
Possible values are tcp | quic | udp. Deprecated, please use TransportProtocol instead.

TransportProtocol

Section titled “TransportProtocol”

Type: string

Transport protocol used for this session.
Possible values are tcp | quic | udp.

UserID

Section titled “UserID”

Type: string

User identity where the network session originated from.

VirtualNetworkID

Section titled “VirtualNetworkID”

Type: string

The identifier of the virtual network the device was connected to, if any.

VirtualNetworkName

Section titled “VirtualNetworkName”

Type: string

The name of the virtual network the device was connected to, if any.