List of newly added columns | Description |
event_info.mail_event_type | The event type corresponds to the Event attribute in Gmail log events in Security Investigation Tool. |
event_info.client_context.client_type | The type of client or device where the action occurred, including: WEB, IOS, ANDROID, IMAP, POP3, and API. |
event_info.client_context.session_context.delegate_user_email | Email address of the delegated user who performed the action on the account owner's behalf. |
message_info.attachment.file_name | File attachment name. |
message_info.post_delivery_info | Information about the post-delivery event. |
message_info.post_delivery_info.action_type | Post-delivery action type.
|
message_info.post_delivery_info.interaction | Information about the user's interaction with message links, Drive items, or attachments. |
message_info.post_delivery_info.interaction.link_url | The URL associated with the interaction, which is set only for link click interactions. |
message_info.post_delivery_info.interaction.drive_id | The unique ID of the Google Drive item associated with the interaction. This ID is used to access the item in Drive. |
message_info.post_delivery_info.interaction.attachment | The target attachments of the interaction, which are set only for attachment interactions. |
message_info.post_delivery_info.interaction.attachment.file_extension_type | File extension (not MIME part type), not including the period. |
message_info.post_delivery_info.interaction.attachment.malware_family | Malware type, if malware is detected during message handling. |
message_info.post_delivery_info.interaction.attachment.file_name | Attachment file name. |
message_info.post_delivery_info.interaction.attachment.sha256 | SHA256 hash of the attachment. |
