DuoSecurityAuthentication_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

Attribute Value
Custom Log V1 Yes 🔶 — uses type-suffixed column names
Ingestion API Supported ✓ Yes

Contents

Schema (27 columns)

Source: KQL validation test schema

Column Name Type
access_device_browser_s string
access_device_browser_version_s string
access_device_ip_s string
access_device_is_encryption_enabled_s string
access_device_is_firewall_enabled_s string
access_device_is_password_set_s string
access_device_location_city_s string
access_device_location_country_s string
access_device_location_state_s string
access_device_os_s string
access_device_os_version_s string
alias_s string
application_key_s string
application_name_s string
auth_device_name_s string
email_s string
event_type_s string
factor_s string
isotimestamp_t datetime
reason_s string
result_s string
TimeGenerated datetime
timestamp_d real
txid_g string
user_groups_s string
user_key_s string
user_name_s string

Solutions (1)

This table is used by the following solutions:

Content Items Using This Table (2)

Analytic Rules (1)

In solution Threat Intelligence:

Analytic Rule Selection Criteria
TI Map IP Entity to Duo Security

Workbooks (1)

GitHub Only:

Workbook Selection Criteria
DuoSecurity

Parsers Using This Table (1)

Other Parsers (1)

Parser Solution Selection Criteria
DuoSecurityAuthentication (Legacy)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index