ASIM Network Session ASIM parser for Cisco ASA

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimNetworkSessionCiscoASA
Built-in Parser _ASim_NetworkSession_CiscoASA
Schema NetworkSession
Schema Version 0.2.6
Parser Type 🔌 Source (product-specific)
Product CiscoASA
Parser Version 1.1.0 (version history)
Last Updated Jan 09, 2025
Unifying Parser ASimNetworkSession
Source File Parsers\ASimNetworkSession\Parsers\ASimNetworkSessionCiscoASA.yaml

Description

This ASIM parser supports normalizing commonly used Cisco ASA messages collected using the CEF Data Connector to the ASIM Network Session normalized schema.

Source Tables

This parser reads from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceEventClassID in "106001,106002,106006,106007,106010,106012,106013,106014,106015,106016,106017,106018,106020,106021,106022,106023,106100,302013,302014,302015,302016,302020,302021,710002,710003,710004,710005"
DeviceProduct == "ASA"
DeviceVendor == "Cisco"

Parameters

Name Type Default
disabled bool False

Associated Connectors

The following connectors provide data for this parser:

Connector Solution
CefAma Common Event Format
VirtualMetricDirectorProxy VirtualMetric DataStream
VirtualMetricMSSentinelConnector VirtualMetric DataStream
VirtualMetricMSSentinelDataLakeConnector VirtualMetric DataStream

Solutions: Common Event Format, VirtualMetric DataStream

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index