Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| certificates | dynamic |
| doi | long |
| exchange_type | long |
| flag_a | bool |
| flag_c | bool |
| flag_e | bool |
| flag_i | bool |
| flag_r | bool |
| flag_v | bool |
| hash | string |
| id_orig_h | string |
| id_orig_p | int |
| id_resp_h | string |
| id_resp_p | int |
| initiator_spi | string |
| is_orig | bool |
| ke_dh_groups | dynamic |
| length | long |
| maj_ver | long |
| message_id | long |
| min_ver | long |
| notify_messages | dynamic |
| path | string |
| proposals | dynamic |
| protocol_id | long |
| responder_spi | string |
| situation | string |
| system_name | string |
| TimeGenerated | datetime |
| transform_attributes | dynamic |
| transforms | dynamic |
| ts | datetime |
| Type | string |
| uid | string |
| vendor_ids | dynamic |
| write_ts | datetime |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Data_Explorer | |
| Corelight_Security_Workflow |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_ipsec | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊