It appears the RequestUrl field is not being populated correctly. The requestProtocol, requestUrlAuthority,requestUrlHost, requestUrlPort, requestUrlFilename, and requestUrlQuery are all populated from a correctly formatted requestUrl: <protocol>://<authority>@<host>:<port>/<filename>?<query>. (per ArcSight dcumentation).
It appears the RequestUrl field is not being populated correctly. The requestProtocol, requestUrlAuthority,requestUrlHost, requestUrlPort, requestUrlFilename, and requestUrlQuery are all populated from a correctly formatted requestUrl: <protocol>://<authority>@<host>:<port>/<filename>?<query>. (per ArcSight dcumentation).