WebSession_Summarized_SrcIP_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Internal Use Table: This table is created and used internally by the Web Session Essentials solution. It is written to by playbooks for solution-specific data storage.

Attribute	Value
Category	Internal
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Content Items

Schema (14 columns)

Source: KQL validation test schema

Column Name	Type
DestDomain_s	string
DstBytes_d	int
DstIPIsPrivate_b	bool
EventCount_d	int
EventProduct_s	string
EventResult_s	string
EventResultDetails_s	string
EventTime_t	datetime
EventType_s	string
SrcBytes_d	int
SrcHostname_s	string
SrcIpAddr_s	string
SrcUsername_s	string
TimeGenerated	datetime

Solutions (1)

This table is used by the following solutions:

• Web Session Essentials

---

Content Items Using This Table (3)

Analytic Rules (1)

In solution Web Session Essentials:

Analytic Rule	Selection Criteria
Detect unauthorized data transfers using timeseries anomaly (ASIM Web Session)

Workbooks (1)

In solution Web Session Essentials:

Workbook	Selection Criteria
WebSessionEssentials

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index