Web Session ASIM filtering parser

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to ASIM Index

Parser Information

Property	Value
Parser Name	`imWebSession`
Built-in Parser	`_Im_WebSession`
Schema	WebSession
Schema Version	0.2.7
Parser Type	📦 Union (schema-level)
Parser Version	0.6.3 (version history)
Last Updated	Mar 24, 2026
Source File	Parsers\ASimWebSession\Parsers\imWebSession.yaml

Description

This ASIM parser supports filtering and normalizing Web Session logs from all supported sources to the ASIM Web Session normalized schema.

Products

This union parser includes parsers for the following products:

Product	Source Parser	Solutions
Apache HTTP Server	_Im_WebSession_ApacheHTTPServer	CustomLogsAma
Azure Firewall	_Im_WebSession_AzureFirewall
Barracuda WAF	_Im_WebSession_BarracudaCEF	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Barracuda WAF	_Im_WebSession_BarracudaWAF
Cisco Firepower	_Im_WebSession_CiscoFirepower	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Cisco Meraki	_Im_WebSession_CiscoMeraki	Cisco SD-WAN CiscoMeraki CustomLogsAma Forescout (Legacy)
Cisco Umbrella	_Im_WebSession_CiscoUmbrella	CiscoUmbrella
Citrix NetScaler	_Im_WebSession_CitrixNetScaler	Common Event Format VirtualMetric DataStream Zscaler Internet Access
F5 BIG-IP Application Security Manager (ASM)	_Im_WebSession_F5ASM	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Fortinet FortiGate	_Im_WebSession_FortinetFortiGate	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Internet Information Services (IIS)	_Im_WebSession_IIS	Microsoft Exchange Security - Exchange On-Premises
Native	_Im_WebSession_Native	Cisco Meraki Events via REST API SynqlyIntegrationConnector
Palo Alto Networks	_Im_WebSession_PaloAltoCEF	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Palo Alto Cortex Data Lake	_Im_WebSession_PaloAltoCortexDataLake	Common Event Format VirtualMetric DataStream Zscaler Internet Access
SonicWall	_Im_WebSession_SonicWallFirewall	Common Event Format VirtualMetric DataStream Zscaler Internet Access
Squid Proxy	_Im_WebSession_SquidProxy	CustomLogsAma
Vectra AI Streams	_Im_WebSession_VectraAI	CustomLogsAma Vectra AI Stream
Zscaler ZIA	_Im_WebSession_ZscalerZIA	Common Event Format VirtualMetric DataStream Zscaler Internet Access

Parameters

Name	Type	Default
`starttime`	datetime	datetime(null)
`endtime`	datetime	datetime(null)
`srcipaddr_has_any_prefix`	dynamic	dynamic([])
`ipaddr_has_any_prefix`	dynamic	dynamic([])
`url_has_any`	dynamic	dynamic([])
`httpuseragent_has_any`	dynamic	dynamic([])
`eventresultdetails_in`	dynamic	dynamic([])
`eventresult`	string	*
`eventresultdetails_has_any`	dynamic	dynamic([])
`disabled`	bool	False
`pack`	bool	False

References

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to ASIM Index