SOCRadarAuditLog_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Tables Index


Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (7 columns)

Source: KQL validation test schema

Column Name Type
AlarmId string
EventType string
Message string
SourceSystem string
TenantId string
TimeGenerated datetime
Type string

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:


Content Items Using This Table (2)

Hunting Queries (1)

In solution SOCRadar:

Hunting Query Selection Criteria
SOCRadar Audit Analysis

Workbooks (1)

In solution SOCRadar:

Workbook Selection Criteria
SOCRadar-Dashboard

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Tables Index