You can use Tags to customize your dashboard if you want to see different information from the standard dashboard. Some tags are only active if a feature is configured on the switch while all Custom Tags are preceded with the word project in the tag.


Field

Field

Field

Field

arp.dst.proto_ipv4

icmpv6.code

ip.srcHostname

tcp.dstport

arp.src.proto_ipv4

icmpv6.type

ip.srcLocation

tcp.flags.ack

dns.count.answers

igmp.type

ip.srcLocation.geohash

tcp.flags.push

dns.flags.rcode

igmp.v3.join

ip.srcLocation.lat

tcp.flags.reset

dns.qry.name

igmp.version

ip.srcLocation.lon

tcp.flags.syn

dscp

ip.checksum_bad

ip.srcPort

tcp.hdr_len

dstmac

ip.dsfield.dscp

ip.transport_layer

tcp.len

dstport

ip.dst

multicast

tcp.options.sack_count

eth.dst

ip.dstCity

packetNumber

tcp.options.sack_le

eth.dstVendor

ip.dstCountry

phishing_site.country

tcp.options.sack_re

eth.src

ip.dstDomain

pim.igmp_type

tcp.seq

eth.srcVendor

ip.dstHostname

pim.join_ip

tcp.srcport

eth.src_resolved

ip.dstLocation

pim.num_joins

tcp.stream

eth.type

ip.dstLocation.geohash

pim.numgroups

timestamp

frame.len

ip.dstLocation.lat

pim.numprunes

udp.checksum_bad

frame.number

ip.dstLocation.lon

pim.prune_ip

udp.dstport

frame.time_delta

ip.dstPort

pim.type

udp.flags.rtp

frame.time_epoch

ip.flags.mf

sessionId

udp.length.bad

frame.time_relative

ip.frag_offset

srcmac

udp.srcport

http.content_type

ip.proto

srcport


http.request.full_uri

ip.protocol

tcp.ack


http.request.method

ip.src

tcp.analysis.ack_rtt


http.response.code

ip.srcCity

tcp.analysis.duplicate_ack


http.user_agent

ip.srcCountry

tcp.analysis.retransmission


icmp.code

ip.srcDomain

tcp.analysis.summary











Insight Analytics Packet List of Standard Tags