ApacheHTTPServer_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Ingestion API Supported	✓ Yes

Schema (8 columns)

Source: KQL validation test schema

This table is used by the following solutions:

This table is ingested by the following connectors:

Connector	Selection Criteria
[Deprecated] Apache HTTP Server
Custom logs via AMA

In solution ApacheHTTPServer:

Analytic Rule	Selection Criteria
Apache - Apache 2.4.49 flaw CVE-2021-41773
Apache - Command in URI
Apache - Known malicious user agent
Apache - Multiple client errors from single IP
Apache - Multiple server errors from single IP
Apache - Private IP in URL
Apache - Put suspicious file
Apache - Request from private IP
Apache - Request to sensitive files
Apache - Requests to rare files

In solution ApacheHTTPServer:

Hunting Query	Selection Criteria
Apache - Rare URLs requested
Apache - Rare files requested
Apache - Rare user agents
Apache - Rare user agents with client errors
Apache - Requests to unexisting files
Apache - Top Top files requested
Apache - Top URLs with client errors
Apache - Top URLs with server errors
Apache - Top files requested with errors
Apache - Unexpected Post Requests

In solution ApacheHTTPServer:

Workbook	Selection Criteria
ApacheHTTPServer

Parser	Schema	Product	Selection Criteria
ASimWebSessionApacheHTTPServer	WebSession	Apache HTTP Server

Parser	Solution	Selection Criteria
ApacheHTTPServer	ApacheHTTPServer
ApacheHTTPServer	ApacheHTTPServer ⚠️

⚠️ Parsers marked with ⚠️ are not listed in their Solution JSON file.

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊