Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _path_s | string |
| _system_name_s | string |
| _timestamp_s | string |
| _timestamp_t | datetime |
| _version_s | string |
| _write_ts_t | datetime |
| mgmt_in_bytes_d | real |
| mgmt_in_bytes_mbps_d | real |
| mgmt_in_packets_d | real |
| mgmt_in_packets_kpps_d | real |
| mgmt_out_bytes_d | real |
| mgmt_out_bytes_mbps_d | real |
| mgmt_out_packets_d | real |
| mgmt_out_packets_kpps_d | real |
| monitor_dropper_total_activated_count_d | real |
| monitor_dropper_total_drops_by_age_d | real |
| monitor_total_bytes_d | real |
| monitor_total_drops_d | real |
| monitor_total_drops_kpps_d | real |
| monitor_total_kpps_d | real |
| monitor_total_mbps_d | real |
| monitor_total_packets_d | real |
| monitor_zeek_packet_delay_d | real |
| TimeGenerated | datetime |
This table is used by the following solutions:
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Sensor_Overview |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_corelight_metrics_iface | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊