VMware_VECO_EventLogs_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (7 columns)

Source: KQL validation test schema

Column Name	Type
category	string
detail	string
event	string
eventTime	datetime
message	string
severity	string
TimeGenerated	datetime

Solutions (1)

This table is used by the following solutions:

• VMware SASE

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
VMware SD-WAN and SASE Connector

---

Content Items Using This Table (9)

Analytic Rules (8)

In solution VMware SASE:

Analytic Rule	Selection Criteria
VMware Cloud Web Security - Policy Change Detected
VMware Cloud Web Security - Policy Publish Event
VMware Edge Cloud Orchestrator - New LAN-Side Client Device Detected
VMware SD-WAN - Orchestrator Audit Event
VMware SD-WAN Edge - All Cloud Security Service Tunnels DOWN
VMware SD-WAN Edge - Device Congestion Alert - Packet Drops
VMware SD-WAN Edge - IDS/IPS Signature Update Failed
VMware SD-WAN Edge - IDS/IPS Signature Update Succeeded

Workbooks (1)

In solution VMware SASE:

Workbook	Selection Criteria
VMwareSASESOCDashboard

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index