Field Names starting from Version 5

Description

Below you can find a list of fields used starting from version 5 in Splunk.

Field names

time_epoch
packet_number
time_delta
time_relative
protocol
highest_layer
length
source_ip
destination_ip
ttl
tcp_stream
tcp_source_port
tcp_destination_port
tcp_window_size
tcp_flags
tcp_syn_flag
tcp_ack_flag
tcp_push_flag
tcp_fin_flag
tcp_reset_flag
seq_number
ack_number
rtt
bytes_in_flight
retransmission
duplicate_ack
zero_window
window_full
reused_port
udp_stream
udp_source_port
udp_destination_port
dns_id
dns_query_type
dns_query_name
dns_id
dns_status
dns_response_name
dns_time
dns_response_ipv4
dns_response_ipv6
tls_record_layer
tls_content_type
tls_record_version
tls_record_length
http_request_method
http_request_uri
http_request_version
http_request_host
http_response_for_uri
http_response_status
http_request_in_packet
http_time
http_method
http_request_uri
http_request_version
http_host
http_response_for_uri
http_status
http_request_in_packet
source_mac
destination_mac
vlan_id
smb2_sessionid
smb2_messageid
smb2_cmd
smb2_sessionid
smb2_messageid
smb2_cmd
smb2_nt_status
smb2_time
rpc_xid
rpc_msgtyp
rpc_program
rpc_programversion
rpc_procedure
rpc_auth_machinename
rpc_auth_uid
rpc_auth_gid
rpc_xid
rpc_msgtyp
rpc_program
rpc_programversion
rpc_procedure
rpc_request_in_packet
rpc_time
nfs_status
mq_tsh_structid
mq_tsh_seglength
mq_tsh_convid
mq_tsh_requestid
mq_tsh_type
mq_tsh_ccsid