Audits_Data_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items
• Parsers

Schema (24 columns)

Source: KQL validation test schema

Column Name	Type
_ResourceId	string
api_client_id	string
Computer	string
entity_type	string
event_action	string
event_data	dynamic
event_object	string
event_timestamp	datetime
id	real
ManagementGroupName	string
message	string
MG	string
RawData	string
result_status	string
source_ip	string
SourceSystem	string
TenantId	string
TimeGenerated	datetime
Type	string
user_id	real
user_role	string
user_type	string
username	string
version	string

Solutions (1)

This table is used by the following solutions:

• Vectra XDR

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Vectra XDR

---

Content Items Using This Table (1)

Workbooks (1)

In solution Vectra XDR:

Workbook	Selection Criteria
VectraXDR

Parsers Using This Table (3)

ASIM Parsers (2)

Parser	Schema	Product	Selection Criteria
ASimAuditEventVectraXDRAudit	AuditEvent	Vectra
ASimAuthenticationVectraXDRAudit	Authentication	Vectra

Other Parsers (1)

Parser	Solution	Selection Criteria
VectraAudits	Vectra XDR

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index