GroupedFields

Grouped fields are aliases for groups of related UDM fields. All fields grouped together are of type string.

JSON representation 
{
  "ip": [
    string
  ],
  "domain": [
    string
  ],
  "hostname": [
    string
  ],
  "user": [
    string
  ],
  "email": [
    string
  ],
  "filePath": [
    string
  ],
  "hash": [
    string
  ],
  "processId": [
    string
  ]
}
Fields
ip[]

string

IP addresses.
domain[]

string

Domains.
hostname[]

string

Hostnames.
user[]

string

Users.
email[]

string

Emails.
filePath[]

string

File paths.
hash[]

string

File Hashes.
processId[]

string

Process Identifiers.