Citrix Analytics for Security

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Publisher	Citrix Systems
Support Tier	Partner
Support Link	https://www.citrix.com/support/
Categories	domains
Version	2.0.1
Author	Citrix Systems
First Published	2022-05-06
Solution Folder	Citrix Analytics for Security

Citrix Analytics (Security) Solution for Microsoft Sentinel helps you to export data analyzed for risky events from Citrix Analytics (Security) into Microsoft Sentinel environment. You can create custom dashboards, analyze data from other sources along with that from Citrix Analytics (Security) and create custom workflows using Logic Apps to monitor and mitigate security events. For more details about this solution refer to https://docs.citrix.com/en-us/security-analytics/siem-integration/azure-sentinel-integration.html

Underlying Microsoft Technologies used:

This solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs: a.Azure Monitor HTTP Data Collector API

Data Connectors
Tables Used
Content Items

Data Connectors

This solution provides 1 data connector(s):

CITRIX SECURITY ANALYTICS 🔶

🔶 CLv1: This connector ingests into a table that uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Tables Used

This solution uses 4 table(s):

Table	Used By Connectors	Used By Content
`CitrixAnalytics_indicatorEventDetails_CL` 🔶	CITRIX SECURITY ANALYTICS	Workbooks
`CitrixAnalytics_indicatorSummary_CL` 🔶	CITRIX SECURITY ANALYTICS	Workbooks
`CitrixAnalytics_riskScoreChange_CL` 🔶	CITRIX SECURITY ANALYTICS	Workbooks
`CitrixAnalytics_userProfile_CL` 🔶	CITRIX SECURITY ANALYTICS	Workbooks

🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Content Items

This solution includes 1 content item(s):

Content Type	Count
Workbooks	1

Workbooks

Name	Tables Used
Citrix	`CitrixAnalytics_indicatorEventDetails_CL` `CitrixAnalytics_indicatorSummary_CL` `CitrixAnalytics_riskScoreChange_CL` `CitrixAnalytics_userProfile_CL`