ASIM Dns ASIM parser for Infoblox BloxOne

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimDnsInfobloxBloxOne
Built-in Parser _ASim_Dns_InfobloxBloxOne
Schema Dns
Schema Version 0.1.7
Parser Type 🔌 Source (product-specific)
Product Infoblox BloxOne
Parser Version 0.1.0 (version history)
Last Updated Sep 11, 2024
Unifying Parser ASimDns
Source File Parsers\ASimDns\Parsers\ASimDnsInfobloxBloxOne.yaml

Description

This ASIM parser supports normalizing Dns logs from Infoblox BloxOne to the ASIM Dns normalized schema. These events are captured through the Azure Monitor Agent (AMA) which are sent by the Data Connector Service of Infoblox BloxOne.

Source Tables

This parser reads from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceEventClassID has "DNS"
DeviceVendor == "Infoblox"

Parameters

Name Type Default
disabled bool False

Associated Connectors

The following connectors provide data for this parser:

Connector Solution
CefAma Common Event Format
VirtualMetricDirectorProxy VirtualMetric DataStream
VirtualMetricMSSentinelConnector VirtualMetric DataStream
VirtualMetricMSSentinelDataLakeConnector VirtualMetric DataStream

Solutions: Common Event Format, VirtualMetric DataStream

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index