Event field reference
Event Investigation: Event field reference
The following table helps you understand the most commonly used fields on event pages. See Server API Reference for API field names and complete return structure.
| Page fields | Common API fields | What you can do with it | Examples |
|---|---|---|---|
| Request ID | request_id | Locate an identification request | req_8f21a0c3 |
| Device ID | device_id or fp_detail. device_id | Associate device and visitor history | GEE4-01-a91c2e7b |
| Event time | Server-side event time field | Compare business logs and time range | 2026-08-25 10:30:00 |
| IP address | metadata. ip_addr_v4/metadata. ip_addr_v6 | Investigate Internet Sources | 203.0.113.10 |
| Risk Signals | signals[] | View the risk signature of a hit | EMULATOR |
| Application | app_id | Confirm business ownership | app_eu_8a21c |
| Region | region | Confirm data area | EU |
| integration platform | Platform field | Distinguish between Web, iOS, and Android | Web |
| Browser | Browser fields | Understanding the web environment | Chrome 126 |
| Operating system | OS field | Understanding the device environment | iOS 17.5 |
Why the field may be empty
Not every event will contain all fields. Fields may be empty because:
- This property is not available on the current platform.
- This information was not detected for this request.
- Fields are restricted by permissions or masking rules.
- The data has exceeded the retention period.
For example, it is normal for Native SDK events to have no browser information; "Unknown" means that the system has no available value, and "—" usually means that the field is not applicable to the current scenario.
Data retention and sensitive fields
Event details and visitor history can only be queried within the data retention period of the current package. After the retention period expires, historical events may not be opened and visitor statistics may change accordingly.
The IP Address, Device ID, Request ID, and Raw Device fields may appear masked based on account permissions or security policies. When the full value is required, please contact your organization administrator to confirm access and do not bypass page restrictions through other means.