Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Supports Transformations | ✗ No |
| Ingestion API Supported | ✓ Yes |
| Lake-Only Ingestion | ✗ No (source) |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| Category | string |
| confidence_s | string |
| created_t | datetime |
| customer_id_s | string |
| device_ip_s | string |
| event_type_s | string |
| first_seen_t | datetime |
| indicators_s | string |
| last_seen_t | datetime |
| muted_b | bool |
| muted_comment_s | string |
| muted_rule_b | bool |
| name_s | string |
| other_dhcp_machost_pairs_s | string |
| other_pdns_hostnames_s | string |
| primary_dhcp_machost_pairs_s | string |
| primary_pdns_hostnames_s | string |
| product_s | string |
| rule_uuid_g | string |
| sensor_id_s | string |
| severity_s | string |
| signal_version_s | string |
| status_s | string |
| subject_s | string |
| TimeGenerated | datetime |
| timestamp_t | datetime |
| Type | string |
| updated_t | datetime |
| uuid_g | string |
| vendor_s | string |
Official Microsoft Learn documentation for field/column information:
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊