Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _path_s | string |
| _system_name_s | string |
| _write_ts_t | datetime |
| app_s | string |
| community_id_s | string |
| conn_state_s | string |
| corelight_shunted_b | bool |
| duration_d | real |
| history_s | string |
| id_orig_h_n_src_s | string |
| id_orig_h_n_vals_s | string |
| id_orig_h_s | string |
| id_orig_p_d | real |
| id_resp_h_n_src_s | string |
| id_resp_h_n_vals_s | string |
| id_resp_h_s | string |
| id_resp_p_d | real |
| inner_vlan_d | real |
| local_orig_b | bool |
| local_resp_b | bool |
| missed_bytes_d | real |
| orig_bytes_d | real |
| orig_cc_s | string |
| orig_ip_bytes_d | real |
| orig_l2_addr_s | string |
| orig_pkts_d | real |
| orig_shunted_bytes_d | real |
| orig_shunted_pkts_d | real |
| proto_s | string |
| resp_bytes_d | real |
| resp_cc_s | string |
| resp_ip_bytes_d | real |
| resp_l2_addr_s | string |
| resp_pkts_d | real |
| resp_shunted_bytes_d | real |
| resp_shunted_pkts_d | real |
| service_s | string |
| spcap_rule_d | real |
| spcap_trigger_s | string |
| spcap_url_s | string |
| suri_ids_s | string |
| TimeGenerated | datetime |
| ts_t | datetime |
| tunnel_parents_s | string |
| uid_s | string |
| vlan_d | real |
Official Microsoft Learn documentation for field/column information:
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊