anomaly{ "code":bigint, "event":string, "layer":string, "type":string }app_protostringcommunity_idstringdest_ipstringdest_portintevent_typestringflow_idbiginticmp_codebiginticmp_typebigintmetadata{ "flowbits":[string], "flowints":{ "applayer_anomaly_count":bigint, "http_anomaly_count":bigint, "tcp_retransmission_count":bigint, "tls_anomaly_count":bigint } }packetstringpacket_info{ "linktype":bigint }pcap_cntbigintpcap_filenamestringprotobigintsrc_ipstringsrc_portinttimestamptimestamptx_idbigintcommunity_idstringdns{ "aa":boolean, "answers":[{ "rdata":string, "rrname":string, "rrtype":string, "ttl":bigint }], "authorities":[{ "rrname":string, "rrtype":string, "ttl":bigint }], "flags":string, "grouped":{ "A":[string], "AAAA":[string], "CNAME":[string], "MX":[string], "PTR":[string], "TXT":[string] }, "id":bigint, "qr":boolean, "ra":boolean, "rcode":string, "rd":boolean, "rrname":string, "rdata":string, "rrtype":string, "ttl":bigint, "tx_id":bigint, "type":string, "version":bigint }dest_ipstringdest_portintevent_typestringflow_idbigintpcap_cntbigintpcap_filenamestringprotobigintsrc_ipstringsrc_portinttimestamptimestampvlan[bigint]p_log_typestringp_row_idstringp_event_timetimestampp_parse_timetimestampp_source_idstringp_source_labelstring