Network Session ASIM parser for Azure Firewall logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimNetworkSessionAzureFirewall |
| Built-in Parser | _ASim_NetworkSession_AzureFirewall |
| Schema | NetworkSession |
| Schema Version | 0.2.6 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Azure Firewall |
| Parser Version | 0.2.0 (version history) |
| Last Updated | Dec 3, 2025 |
| Unifying Parser | ASimNetworkSession |
| Source File | Parsers\ASimNetworkSession\Parsers\ASimNetworkSessionAzureFirewall.yaml |
Description
This ASIM parser supports normalizing Azure Firewall logs to the ASIM Network Session normalized schema. This parser is partially based on a work by Koos Goossens.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
AZFWIdpsSignature |
✓ | ✗ | ? | |
AZFWNatRule |
✓ | ✗ | ? | |
AZFWNetworkRule |
✓ | ✗ | ? | |
AZFWThreatIntel |
✓ | ✗ | ? | |
AzureDiagnostics 🔶 |
Category == "AzureFirewallNetworkRule" |
? | ✗ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| AzureFirewall | Azure Firewall |
Solutions: Azure Firewall
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊