Data in Prolexic attack and alert notifications

If you enable Prolexic attack and alert notifications, the following data is included in the email notification.

Field	Description
NAME	Name of the notification.
TYPE	The type of notification. For example, the listed type indicates whether the notification is for detected alerts or attacks.
SERVICE	Indicates the service that’s reported in the notification. In this case, it shows Prolexic.
START TIME	The time when the email was sent in GMT format.
EMAIL DELAY	Indicates how many minutes after the condition that started the event was sustained before the email was sent.
ACCOUNT_ID_KEY	ID associated with your account.
EVENT_URI_KEY	The unique resource identifier (URI) of the event.
START_TIME	The start time of the event.
CUSTOMER_NAME	The name of your organization.
SEVERITY	The severity level of the alert. Alerts can have one of these levels in a scale from 0 to 100: High. Depending on the notification type, the following applies: For Prolexic attacks, this severity level indicates there is an active attack. For Prolexic alerts, this severity level indicates a likely malicious event that’s not associated with an attack. Medium. Indicates an event may require review.
SHORT_MESSAGE	Short message of what triggered the alert or attack event.
IS_ACTIVE	Indicates whether the event is still active. This field shows 1 or 0. 1 indicates the event is active, while 0 means it is not currently active.
DESTINATION_IPS	The targeted destination IP addresses for the attack or event.
SOURCE	Indicates the source of the alert or event data. It can be one of the following: socdash. Data results from Akamai SOCC. fbm. Data results from flow-based monitoring (fbm).
INVESTIGATE_LINK	Link to the Routed Events page in Control Center where you can view more data on attacks.
END_TIME	If applicable, the end time of the event or alert. If the event is still active, there is no value in this field.
DESCRIPTION	Indicates why you are receiving this email notification. A link is provided to the Prolexic dashboard in Infrastructure Security Analytics where you can view more information.