SailPointIDN_Events_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Tables Index


Attribute Value
Custom Log V1 Yes 🔶 — uses type-suffixed column names
Ingestion API Supported ✓ Yes

Contents

Schema (66 columns)

Source: KQL validation test schema

Column Name Type
action_s string
actor_name_g string
actor_name_s string
attributes_accessItemId_g string
attributes_accessItemName_s string
attributes_accessItemType_s string
attributes_accessProfileIds_after_s string
attributes_accessProfileIds_before_s string
attributes_accountActivityId_g string
attributes_accountName_s string
attributes_appId_g string
attributes_approvalSchemes_after_s string
attributes_approvalSchemes_before_s string
attributes_attributeName_s string
attributes_attributeValue_s string
attributes_cloudAppName_s string
attributes_comment_s string
attributes_comments_s string
attributes_disabled_after_s string
attributes_disabled_before_s string
attributes_displayName_after_s string
attributes_displayName_before_s string
attributes_errors_s string
attributes_flow_s string
attributes_hostName_s string
attributes_IdnAccessRequestAttributes_s string
attributes_info_g string
attributes_info_s string
attributes_interface_s string
attributes_operation_s string
attributes_org_s string
attributes_pod_s string
attributes_preventativeSODResultsJSON_s string
attributes_previousValue_s string
attributes_provisioningResult_s string
attributes_requestable_after_s string
attributes_requestable_before_s string
attributes_requestedAppId_s string
attributes_requestedAppName_s string
attributes_requestedAppRoleId_g string
attributes_requestedObjectType_s string
attributes_reviewerComment_s string
attributes_sourceId_s string
attributes_sourceName_s string
attributes_synchronizeFrom_s string
attributes_synchronizeTo_s string
attributes_taskResultId_g string
attributes_userId_s string
created_t datetime
details_g string
details_s string
id_g string
name_s string
objects_s string
operation_s string
org_s string
pod_s string
stack_s string
status_s string
synced_t datetime
target_name_g string
target_name_s string
technicalName_s string
TimeGenerated datetime
trackingNumber_g string
type_s string

Solutions (1)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
SailPoint IdentityNow

Content Items Using This Table (5)

Analytic Rules (5)

In solution SailPointIdentityNow:

Analytic Rule Selection Criteria
SailPointIdentityNowEventType
SailPointIdentityNowEventTypeTechnicalName
SailPointIdentityNowFailedEvents
SailPointIdentityNowFailedEventsBasedOnTime
SailPointIdentityNowUserWithFailedEvent

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Tables Index