Understand origin data and redirect data

To help users establish the path of data when analyzing query results, Web Scanner makes use of origin_xxx and redirect field names as search parameters.

Origin data

origin_xxx data represents the initial piece of data that a scan was conducted on.

Here's a list of current origin_xxx field names, and their associated data types:

• origin_domain
• origin_hostname
• origin_ip
• origin_path
• origin_port
• origin_scheme
• origin_url

Combined origin and destination searches

When searching for a domain, hostname, path or url, the matching origin_xxx field is also searched automatically.

This is supported for exact matches, wildcard matches, and regular expression matches.

For negative matches, using != or!~=, only the given field is searched.

'Redirect' data

The redirect field name gives a boolean response that indicates whether a redirect was detected during the connection.

The redirect_to_https field name gives a boollean response that indicates if the redirect led to a HTTPS connection.

The redirect_list field name provides a list of all redirects that occurred during the connection.