Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _path_s | string |
| _system_name_s | string |
| _write_ts_t | datetime |
| certificates_s | string |
| doi_d | real |
| exchange_type_d | real |
| flag_a_b | bool |
| flag_c_b | bool |
| flag_e_b | bool |
| flag_i_b | bool |
| flag_r_b | bool |
| flag_v_b | bool |
| id_orig_h_s | string |
| id_orig_p_d | real |
| id_resp_h_s | string |
| id_resp_p_d | real |
| initiator_spi_s | string |
| is_orig_b | bool |
| ke_dh_groups_s | string |
| length_d | real |
| maj_ver_d | real |
| message_id_d | real |
| min_ver_d | real |
| notify_messages_s | string |
| proposals_s | string |
| protocol_id_d | real |
| responder_spi_s | string |
| situation_s | string |
| TimeGenerated | datetime |
| transform_attributes_s | string |
| transforms_s | string |
| ts_t | datetime |
| uid_s | string |
| vendor_ids_s | string |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Alert_Aggregations | |
| Corelight_Data_Explorer | |
| Corelight_Security_Workflow |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_ipsec | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊