IpNetworkEvent

IP network event parse from the NetworkEvent, passed back to the client from the RPC ListAssetEvents. IpNetworkEvent is a lookup event that has no domain associated with it. Example cases: * A machine curling a website's IP directly.

JSON representation 
{ "eventTime": string, "chip": { object (Chip) }, "ipAddress": string, "httpDetails": [ { object (HttpDetails) } ], "customerPrevalence": integer, "filterProperties": { object (FilterProperties) }, "rawLogsToken": string, "sidebarEntries": [ { object (SidebarEntry) } ], "assetIndicator": { object (AssetIndicator) } }
Fields
eventTime

string (Timestamp format)

Date/time of lookup (i.e. not the time that the event was ingested).

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
chip

object (Chip)

The chip to display.
ipAddress

string

The IP address looked up. Examples: "127.0.0.1" or "2001:cdba:0000:0000:0000:0000:3257:9652"
httpDetails[]

object (HttpDetails)

Additional details about HTTP requests associated with this lookup.
customerPrevalence

integer

The prevalence of the domain within the customer's environment, defined for v1 as the number of unique assets per day looking up the domain name over the trailing 10 days.
filterProperties

object (FilterProperties)

A list of filter properties associated the event.
rawLogsToken

string

A token to request raw logs, this is opaque to the client. If empty, no raw logs can be requested.
sidebarEntries[]

object (SidebarEntry)

All the sidebar entries.
assetIndicator

object (AssetIndicator)

AssetIndicator used for pivoting.