When you write custom rules, you can use the following data properties.
| Property | Data Type | Description |
|---|---|---|
| uri | String | |
| queryParams | String | |
| serverIp | String | |
| serverPort | Int | |
| urlHashCode | Long | |
| urlQueryParamHashCode | Long | |
| #tags | Set<String> |
Header properties
| Property | Data Type | Description |
|---|---|---|
| requestCookies | ParsedCookieHeader | |
| headerOffsetHost | Double | |
| headerOffsetUserAgent | Double | |
| headerValueReferer | String | |
| headerOffsetReferer | Double | |
| headerValueAccept | String | |
| headerOffsetAccept | Double | |
| headerValueAcceptEncoding | String | |
| headerOffsetAcceptEncoding | Double | |
| headerValueAcceptCharset | String | |
| headerOffsetAcceptCharset | Double | |
| headerValueAcceptLanguage | String | |
| headerOffsetAcceptLanguage | Double | |
| headerValueConnection | String | |
| headerOffsetConnection | Double | |
| headerValueCookie | String | |
| headerValueSetCookie | String | |
| headerValueKeepAlive | String | |
| headerOffsetKeepAlive | Double | |
| headerValueTe | String | |
| headerOffsetTe | Double | |
| headerValuePragma | String | |
| headerOffsetPragma | Double | |
| headerValueCacheControl | String | |
| headerOffsetCacheControl | Double | |
| headerValueDnt | String | |
| headerOffsetDnt | Double | |
| headerValueDate | String | |
| headerOffsetDate | Double | |
| headerValueTrueClientIp | String | |
| headerValueContentType | String | |
| headerOffsetContentType | Double | |
| headerOffsetOrigin | Double | |
| headerOffsetUpgradeInsecureRequests | Double | |
| headerValueLocation | String | |
| headerValueAkamaiOriginHop | String | |
| headerValueAcceptLanguageQCount | Int | |
| headerValueAcceptQCount | Int |
Request properties
| Property | Data Type | Description |
|---|---|---|
| #request | RequestMessage | |
| #requestValueMap | Map<String, Optional<String>> | |
| timestamp | String | |
| unixTimestamp | Double | |
| originatingIp | String | |
| clientIp | String | |
| clientPort | Int | |
| #method | String | |
| userAgent | String | |
| userAgentHashCode | Long | |
| httpRequestBody | String | |
| requestBodyLen | Int | |
| requestHeadersEncoded | String | |
| isIpv6 | Boolean | |
| isPubliclyRouteableIp | Boolean |
Response properties
| Property | Data Type | Description |
|---|---|---|
| #response | ResponseMessage | |
| #responseValueMap | Map<String, Optional<String>> | |
| #statusCode | Int | |
| httpResponseBody | String | |
| responseHeadersEncoded | String |
Analysis properties
| Property | Data Type | Description |
|---|---|---|
| #transactionId | String | |
| #transactionDepth | Int | |
| fingerprint | Long | |
| browserInfo | BrowserInfo | |
| isWellKnownBrowser | Boolean | |
| isMobileBrowser | Boolean | |
| projectedBrowser | String | |
| projectedBrowserMajorVersion | Int | |
| projectedOs | String | |
| projectedOsMajorVersion | Int | |
| isUndeterminedProxy | Boolean | |
| isTor | Boolean | |
| #matchingDatasets | Set<Int> | |
| username | String | |
| password | String | |
| sessionid | String | |
| successfulLogin | TriState | |
| failedLogin | TriState | |
| isWeb | Boolean | |
| isMobile | Boolean | |
| isApi | Boolean | |
| #httpFeatureVector | List<Double> | |
| #mlOutput | Map<String, Any> | |
| networkIqFeeds | List<String> | |
| isInIspDenyList | Boolean | |
| isInOrgDenyList | Boolean | |
| isInPoorlyBehavedNetworks | Boolean | |
| proxyFeedsNames | Set<String> | |
| proxyFeeds | Set<String> | |
| isOldBrowser | Boolean | |
| goodBotName | String | |
| countryLanguageMatch | TriState | |
| credDumpMatches | List<Boolean> | |
| acceptLanguageMalformed | Boolean | |
| confidence | Int | |
| experimentalConfidence | Int | |
| mitigationAction | String |
Upcoming properties
| Property | Data Type | Description |
|---|---|---|
| connectionTimestamp | Double | |
| requestVersion | Double | |
| featureVector | String | |
| type | String | |
| locationAttributes | LocationAttributes | |
| uniqueCounts | Map<String, Int> | |
| conditionAggregates | Set<String> | |
| rules | List<MatchedRule> | |
| ruleHash | Int | |
| experimentalRuleHash | Int | |
| aiSearchInfo | List<String> | |
| aiAggInfo | List<String> | |
| extractedData | List<ExtractedDataField> | |
| extracted | Map<String, String> | |
| aggregateCounts | Map<String, List<AggregateCounter>> | |
| stats | Map<String, List<IntervalStatistics>> | |
| fraudDetection | List<MatchedFraudDetectionResult> | |
| smtpNotifications | List<SMTPSettings> | |
| mitigationAction | String | |
| correlationId | String | |
| sessionStitch | SessionStitch | |
| sessionTracking | List<SessionTrackerExtraction> | |
| sessionTrackingConfigured | Boolean |