squid.md

squid

Expression

product = "squid"

Fields

Field	Core	Detection	Informational
method			✓
hierarchy_code			✓
bytes_in			✓
mime			✓
scan_type			✓
rule			✓
fallback_user_name
proxy_action			✓
duration			✓
result			✓
bytes_out			✓
action			✓
result_code			✓
categories			✓
category			✓
user			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
http-session