Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Supports Transformations | ✗ No |
| Ingestion API Supported | ✓ Yes |
| Lake-Only Ingestion | ✗ No (source) |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _ResourceId | string |
| Computer | string |
| created_t | datetime |
| description_s | string |
| id_s | string |
| indicator_types_s | string |
| labels_s | string |
| ManagementGroupName | string |
| MG | string |
| modified_t | datetime |
| name_s | string |
| pattern_s | string |
| pattern_version_s | string |
| RawData | string |
| revoked_b | bool |
| SourceSystem | string |
| spec_version_s | string |
| TenantId | string |
| TimeGenerated | datetime |
| Type | string |
| type_s | string |
| valid_from_t | datetime |
| valid_until_t | datetime |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊