The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Network Event

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

Event Buffer Attribute

Helix Field Destination

Notes

ipv6

event_values.ipv6

True if the network event is over IPv6

localIP

srcipv4

The local IP address associated with the network event

localPort

srciport

The local port associated with the network event

pid

pid

The process ID that initiated the network event

ppath

event_values.ppath

The path for the PE of the process that initiated the network event process process

process

process

The name of the process that initiated the network event

processPath

processPath

The path for the PE of the process that initiated the network event

protocol

protocol

The protocol of the network event

protocolNum

protoid

remoteIP

dstipv4

The remote IP address associated with the network event

remotePort

dstport

The remote port associated with the network event

username

username

The owner of the process that initiated the network event

Related articles
  • Network event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.166 > Helix data and use cases > Data taxonomy
  • Network event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.169 > Helix data and use cases > Data taxonomy
  • Network event
    Endpoint Security Modules (HX) > IOC Streaming > Endpoint Security IOC Streaming Module User Guide Release 1.3.167 > Helix data and use cases > Data taxonomy