VaronisAlerts_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Attribute Value
Custom Log V1 Yes 🔶 — uses type-suffixed column names
Supports Transformations ✓ Yes
Ingestion API Supported ✓ Yes
Lake-Only Ingestion ✓ Yes (source)

Contents

Schema (33 columns)

Source: Connector definition

Column Name Type
AbnormalLocations_s string
AccountsHaveFollowUpIndicators_s string
AggregatedExternalIPThreatTypes_s string
AlertCategory_s string
AlertId_g string
AlertSeverity_s string
AlertTime_t datetime
AlertTimeUTC_t datetime
Assets_s string
AssignedtoVaronis_b bool
BlacklistedLocation_b bool
ClosedBy_s string
CloseReason_s string
ContainsMaliciousExternalIPs_b bool
Countries_s string
DataSources_s string
DataSourceTypes_s string
DeviceNames_s string
EscalationType_s string
EventsCount_d real
FlaggedDataExposed_s string
IngestTime_t datetime
InitialEventTime_t datetime
InitialEventTimeUTC_t datetime
MitreTacticName_s string
PrivilegedAccountType_s string
SensitiveDataExposed_s string
States_s string
Status_s string
ThreatDetectionPolicyName_s string
TimeGenerated datetime
UserNames_s string
UserSamAccountNames_s string

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:

Connectors (2)

This table is ingested by the following connectors:

Connector Selection Criteria
[Deprecated] Varonis SaaS
Varonis SaaS (Push)

Content Items Using This Table (5)

Analytic Rules (4)

In solution VaronisSaaS:

Analytic Rule Selection Criteria
Varonis - High severity alerts detected
Varonis - Informational alerts detected
Varonis - Low severity alerts detected
Varonis - Medium severity alerts detected

Workbooks (1)

In solution VaronisSaaS:

Workbook Selection Criteria
VaronisSaaS

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index