---
title: NAv1 to NAv2 schema map
description: Map Network Analytics v1 fields to v2 fields.
image: https://developers.cloudflare.com/core-services-preview.png
---

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/analytics/llms.txt  
> Use this file to discover all available pages before exploring further.

[Skip to content](#%5Ftop) 

# NAv1 to NAv2 schema map

The following table lists direct mappings between NAv1 and NAv2 fields, when available, and provides related fields when there is no direct mapping available.

| ipFlows1mGroups        | magicTransitNetworkAnalytics-AdaptiveGroups /spectrumNetworkAnalytics-AdaptiveGroups | dosdNetworkAnalytics-AdaptiveGroups         | dosdAttackAnalytics-Groups                  | flowtrackdNetworkAnalytics-AdaptiveGroups   | magicFirewallNetworkAnalytics-AdaptiveGroups |
| ---------------------- | ------------------------------------------------------------------------------------ | ------------------------------------------- | ------------------------------------------- | ------------------------------------------- | -------------------------------------------- |
| date                   | _Related fields:_datetimedatetimeTenSeconds                                          | _Related fields:_datetimedatetimeTenSeconds | _Related fields:_datetimedatetimeTenSeconds | _Related fields:_datetimedatetimeTenSeconds |                                              |
| datetimeMinute         | datetimeMinute                                                                       | datetimeMinute                              | datetimeMinute                              | datetimeMinute                              |                                              |
| datetimeFiveMinutes    | datetimeFiveMinutes                                                                  | datetimeFiveMinutes                         | datetimeFiveMinutes                         | datetimeFiveMinutes                         |                                              |
| datetimeFifteenMinutes | datetimeFifteenMinutes                                                               | datetimeFifteenMinutes                      | datetimeFifteenMinutes                      | datetimeFifteenMinutes                      |                                              |
| datetimeHour           | datetimeHour                                                                         | datetimeHour                                | datetimeHour                                | datetimeHour                                |                                              |
| attackId\*             | attackId\*                                                                           | attackId\*                                  |                                             |                                             |                                              |
| attackType             | attackType                                                                           |                                             |                                             |                                             |                                              |
| attackMitigationType   | mitigationType                                                                       |                                             |                                             |                                             |                                              |
| sourceIPCountry        | sourceCountry                                                                        | sourceCountry                               | sourceCountry                               | sourceCountry                               |                                              |
| sourceIPAsn            | sourceAsn                                                                            | sourceAsn                                   | sourceAsn                                   | sourceAsn                                   |                                              |
| sourceIPASNDescription | _Related field:_sourceGeohash                                                        | _Related field:_sourceGeohash               | _Related field:_sourceGeohash               | _Related field:_sourceGeohash               |                                              |
| coloCode               | coloCode                                                                             | coloCode                                    | coloCode                                    | coloCode                                    |                                              |
| coloCity               | coloCity                                                                             | coloCity                                    | coloCity                                    | coloCity                                    |                                              |
| coloCountry            | coloCountry                                                                          | coloCountry                                 | coloCountry                                 | coloCountry                                 |                                              |
| coloRegion             | _Related field:_coloGeohash                                                          | _Related field:_coloGeohash                 | _Related field:_coloGeohash                 | _Related field:_coloGeohash                 |                                              |
| ipFlows1mGroups        | magicTransitNetworkAnalytics-AdaptiveGroups /spectrumNetworkAnalytics-AdaptiveGroups | dosdNetworkAnalytics-AdaptiveGroups         | dosdAttackAnalytics-Groups                  | flowtrackdNetworkAnalytics-AdaptiveGroups   | magicFirewallNetworkAnalytics-AdaptiveGroups |
| ipVersion              | ethertype                                                                            | ethertype                                   | ethertype                                   | ethertype                                   |                                              |
| bits                   | ipTotalLength (bits divided by 8)                                                    | ipTotalLength (bits divided by 8)           | bits                                        | ipTotalLength (bits divided by 8)           | ipTotalLength (bits divided by 8)            |
| packets                | _n/a_                                                                                | _n/a_                                       | packets                                     | _n/a_                                       | _n/a_                                        |
| ipProtocol             | ipProtocol                                                                           | ipProtocol                                  | ipProtocol                                  | ipProtocol                                  | ipProtocol                                   |
| sourceIP               | ipSourceAddress                                                                      | ipSourceAddress                             | sourceIp                                    | ipSourceAddress                             | ipSourceAddress                              |
| destinationIP          | ipDestinationAddress                                                                 | ipDestinationAddress                        | destinationIp                               | ipDestinationAddress                        | ipDestinationAddress                         |
| destinationIPv4Range24 | ipDestinationSubnet                                                                  | ipDestinationSubnet                         | ipDestinationSubnet                         | ipDestinationSubnet                         |                                              |
| destinationIPv4Range23 | _n/a_                                                                                | _n/a_                                       | _n/a_                                       | _n/a_                                       |                                              |
| sourcePort             | sourcePort                                                                           | sourcePort                                  | sourcePort                                  | sourcePort                                  | sourcePort                                   |
| destinationPort        | destinationPort                                                                      | destinationPort                             | destinationPort                             | destinationPort                             | destinationPort                              |
| tcpFlags               | tcpFlags                                                                             | tcpFlags                                    | tcpFlags                                    | tcpFlags                                    | tcpFlags                                     |

\* The `attackId` field value may be different between NAv1 and NAv2 for the same attack.

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/directory/","name":"Directory"}},{"@type":"ListItem","position":2,"item":{"@id":"/analytics/","name":"Analytics"}},{"@type":"ListItem","position":3,"item":{"@id":"/analytics/graphql-api/","name":"GraphQL Analytics API"}},{"@type":"ListItem","position":4,"item":{"@id":"/analytics/graphql-api/migration-guides/","name":"Migration guides"}},{"@type":"ListItem","position":5,"item":{"@id":"/analytics/graphql-api/migration-guides/network-analytics-v2/","name":"Network Analytics v1 to Network Analytics v2"}},{"@type":"ListItem","position":6,"item":{"@id":"/analytics/graphql-api/migration-guides/network-analytics-v2/schema-map/","name":"NAv1 to NAv2 schema map"}}]}
```