Smart Web Security Audit Trails Events: SWSMatchedRequest

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "authentication": {
    "authenticated": "boolean",
    // Includes only one of the fields `subjectType`
    "subjectType": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectId`
    "subjectId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `subjectName`
    "subjectName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationId`
    "federationId": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationName`
    "federationName": "string",
    // end of the list of possible fields
    // Includes only one of the fields `federationType`
    "federationType": "string",
    // end of the list of possible fields
    "tokenInfo": {
      "maskedIamToken": "string",
      // Includes only one of the fields `iamTokenId`
      "iamTokenId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorId`
      "impersonatorId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorType`
      "impersonatorType": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorName`
      "impersonatorName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationId`
      "impersonatorFederationId": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationName`
      "impersonatorFederationName": "string",
      // end of the list of possible fields
      // Includes only one of the fields `impersonatorFederationType`
      "impersonatorFederationType": "string"
      // end of the list of possible fields
    }
  },
  "authorization": {
    "authorized": "boolean"
  },
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "requestMetadata": {
    "remoteAddress": "string",
    "userAgent": "string",
    "requestId": "string",
    // Includes only one of the fields `remotePort`
    "remotePort": "string"
    // end of the list of possible fields
  },
  "eventStatus": "string",
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "details": {
    "clientIp": "string",
    "requestTime": "string",
    "albId": "string",
    "albRequestId": "string",
    "uniqueKey": "string",
    "httpVersion": "string",
    "httpMethod": "string",
    "httpHost": "string",
    "httpPath": "string",
    "httpQueries": "string",
    "headers": [
      {
        "key": "string",
        "value": "string"
      }
    ],
    "securityProfileId": "string",
    "securityProfileName": "string",
    "moduleType": "string",
    "action": "string",
    "arlProfileId": "string",
    "arlProfileName": "string",
    "arlVerdict": "string",
    "arlAppliedQuotaName": "string",
    "arlMatchedQuotas": [
      {
        "quotaName": "string",
        "allowed": "string",
        "dryRun": "string",
        "priority": "string",
        "counter": "string",
        "requests": "string",
        "period": "string",
        "limit": "string",
        "banPeriod": "string"
      }
    ],
    "matchedRuleName": "string",
    "matchedRuleVerdict": "string",
    "wafProfileId": "string",
    "wafProfileName": "string",
    "wafAppliedRuleSetId": "string",
    "wafRuleSetsIds": [
      "string"
    ],
    "wafMatchedRules": "object",
    "wafMatchedExclusionRules": [
      {
        "exclusionRuleName": "string",
        "excludedRuleIds": [
          "string"
        ]
      }
    ],
    "dryRunMatchedRuleName": "string",
    "dryRunMatchedRuleVerdict": "string",
    "dryRunWafProfileId": "string",
    "dryRunWafProfileName": "string",
    "dryRunWafAppliedRuleSetId": "string",
    "dryRunWafRuleSetsIds": [
      "string"
    ],
    "dryRunWafMatchedRules": "object",
    "dryRunWafMatchedExclusionRules": [
      {
        "exclusionRuleName": "string",
        "excludedRuleIds": [
          "string"
        ]
      }
    ],
    "customPageId": "string",
    "customPageName": "string",
    "botScore": "string",
    "botName": "string",
    "botCategory": "string",
    "verifiedBot": "string",
    "ja3": "string",
    "ja4": "string",
    "asnList": [
      "string"
    ],
    "country": "string",
    "userAgent": "string",
    "matchedRuleType": "string",
    "dryRunMatchedRuleType": "string",
    "httpBodySize": "string"
  },
  "requestParameters": "object",
  "response": "object"
}