Process Event ASIM parser for Microsoft Sentinel native Process Event table
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimProcessEventNative |
| Built-in Parser | _ASim_ProcessEvent_Native |
| Schema | ProcessEvent |
| Schema Version | 0.1.4 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Native |
| Parser Version | 0.1.0 (version history) |
| Last Updated | Nov 22 2023 |
| Unifying Parser | ASimProcessEvent, ASimProcessEventCreate, ASimProcessEventTerminate |
| Source File | Parsers\ASimProcessEvent\Parsers\ASimProcessEventNative.yaml |
Description
This ASIM parser supports normalizing the native Process Event table (ASimProcessEventLogs) to the ASIM Process Event normalized schema. While the native table is ASIM compliant, the parser is needed to add capabilities, such as aliases, available only at query time.
Source Tables
This parser reads from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
ASimProcessEventLogs |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| SynqlyIntegrationConnector | SynqlyIntegrationConnector |
Solutions: SynqlyIntegrationConnector
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊