Session

Top Level Fieldset: True

This field set contains information about the user's session when an event occurred.

Session Fields

session.id

Required Field: False
Type: STRING
Example: bhM5rBAHTu1RggVh
Detection Supported Field: True

Unique ID of the session.

session.kind

Required Field: False
Type: STRING
Example: HIGH_ASSURANCE
Detection Supported Field: True

Description of the privilege level associated with a session, or how a session was established.