CognniIncidents_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (22 columns)

Source: KQL validation test schema

Column Name	Type
_ResourceId	string
_SubscriptionId	string
attachmentId_s	string
Computer	string
eventTime_t	datetime
fileName_s	string
informationType_s	string
insights_s	string
internalEventId_g	string
labels_s	string
listId_g	string
listItemUniqueId_g	string
messageId_s	string
name_s	string
orgId_g	string
RawData	string
Severity	int
siteId_g	string
sourceFileExtension_s	string
TimeGenerated	datetime
Type	string
userId_s	string

Solutions (1)

This table is used by the following solutions:

• Cognni

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Cognni

---

Content Items Using This Table (17)

Analytic Rules (15)

In solution Cognni:

Analytic Rule	Selection Criteria
Cognni Incidents for Highly Sensitive Business Information
Cognni Incidents for Highly Sensitive Financial Information
Cognni Incidents for Highly Sensitive Governance Information
Cognni Incidents for Highly Sensitive HR Information
Cognni Incidents for Highly Sensitive Legal Information
Cognni Incidents for Low Sensitivity Business Information
Cognni Incidents for Low Sensitivity Financial Information
Cognni Incidents for Low Sensitivity Governance Information
Cognni Incidents for Low Sensitivity HR Information
Cognni Incidents for Low Sensitivity Legal Information
Cognni Incidents for Medium Sensitivity Business Information
Cognni Incidents for Medium Sensitivity Financial Information
Cognni Incidents for Medium Sensitivity Governance Information
Cognni Incidents for Medium Sensitivity HR Information
Cognni Incidents for Medium Sensitivity Legal Information

Workbooks (2)

In solution Cognni:

Workbook	Selection Criteria
CognniIncidentsWorkbook

GitHub Only:

Workbook	Selection Criteria
CognniIncidentsWorkbook

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index