IONIX Security Logs

Solution: IONIX

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Publisher	IONIX
Support Tier	Partner
Support Link	https://www.ionix.io/contact-us/
Categories	domains
Version	3.1.0
Author	IONIX - support@ionix.io
First Published	2022-05-02
Last Updated	2026-03-27
Solution Folder	IONIX
Marketplace	Azure Marketplace · Popularity: 🔵 Medium (57%)

The IONIX solution for Microsoft Sentinel enables you to ingest vulnerability logs from the IONIX platform into Microsoft Sentinel.

Underlying Microsoft Technologies used:

This solution is dependent on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs:

a. Codeless Connector Platform/Native Microsoft Sentinel Polling

Data Connectors
Tables Used
Content Items

Data Connectors

This solution provides 2 data connector(s):

🔶 CLv1: This connector ingests into a table that uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Tables Used

This solution uses 1 table(s):

Table	Used By Connectors	Used By Content
`CyberpionActionItems_CL` 🔶	IONIX Security Logs (via Codeless Connector Framework), [DEPRECATED] IONIX Security Logs (Push)	Analytics, Workbooks

🔶 CLv1: This table uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Content Items

This solution includes 2 content item(s):

Content Type	Count
Analytic Rules	1
Workbooks	1

Analytic Rules

Name	Severity	Tactics	Tables Used
High Urgency IONIX Action Items	High	InitialAccess	`CyberpionActionItems_CL`

Workbooks

Name	Tables Used
IONIXOverviewWorkbook	`CyberpionActionItems_CL`

Release Notes

Version	Date Modified (DD-MM-YYYY)	Change History
3.1.0	16-02-2026	Added new CCF RestApiPoller data connector (recommended). Automatic daily polling from IONIX API. Old push connector marked as deprecated - will be removed June 2026. Updated workbook and analytics rule with id_s deduplication.
3.0.0	20-09-2023	A UI-only update as part of a re-branding from "Cyberpion" to "IONIX" (no change to core functionality) \| v1.0.1