IdfwUserSessionData
IdfwUserSessionData
Identity Firewall user session data on a client machine (typically a VM). Multiple entries for the same user can be returned if the user logins to multiple sessions on the same VM.
JSON Example
{
"domain_name": "string",
"id": "string",
"login_time": 0,
"logout_time": 0,
"session_source": "string",
"user_id": "string",
"user_name": "string",
"user_session_id": 0,
"vm_ext_id": "string"
}
string
domain_name
Required
AD Domain of user.
string
id
Optional
Identifier of user session data.
integer As int64
As int64
login_time
Required
Login time.
integer As int64
As int64
logout_time
Optional
Logout time if applicable. An active user session has no logout time. Non-active user session is stored (up to last 5 most recent entries) per VM and per user.
string
session_source
Optional
User session source can be one of:
- GI (Guest Introspection)
- ELS (AD Event log server)
- LI (Log Insight)
Possible values are :
GI,
ELS,
LI,
string
user_id
Optional
AD user ID (may not exist).
string
user_name
Required
AD user name.
integer As int64
As int64
user_session_id
Required
User session ID. This also indicates whether this is VDI / RDSH.
string
vm_ext_id
Optional
Virtual machine (external ID or BIOS UUID) where login/logout events occurred.