PaloAltoCortexXDR_Audit_Management_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (19 columns)

Source: Connector definition

Column Name Type Description
AuditAssetJSON dynamic JSON object containing the audit asset details
AuditAssetNames string Names of the assets involved in the audit
AuditCaseId int Case ID related to the audit event
AuditDescription string Description of the audit event
AuditEntity string Entity type associated with the audit event
AuditEntitySubtype string Subtype of the audit entity (e.g., Login)
AuditHostName string Host name associated with the audit event
AuditId int Unique identifier for the audit event
AuditInsertTime datetime Time when the audit record was inserted into the system.
AuditOwnerEmail string Email address of the audit owner
AuditOwnerName string Name of the owner who initiated the audit event
AuditReason string Reason for the audit event
AuditResult string Result of the audit event (e.g., SUCCESS)
AuditSessionId int Session ID related to the audit event
AuditSeverity string The Severity of the Audit log.
AuditSourceIp string The source Ip of the audit log.
AuditUserAgent string The User Agent of the audit user.
AuditUserRoles dynamic The roles of the audit user.
TimeGenerated datetime The time when the record was generated

Solutions (2)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
Palo Alto Cortex XDR

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index