ASIM Alert Event ASIM parser

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimAlertEvent (parameter-less) · imAlertEvent (filtering)
Built-in Parser _ASim_AlertEvent (parameter-less) · _Im_AlertEvent (filtering)
Schema AlertEvent
Schema Version 0.1
Parser Type 📦 Union (schema-level)
Parser Version 0.1.7 (version history)
Last Updated Jul 01, 2026
Source File Parsers\ASimAlertEvent\Parsers\ASimAlertEvent.yaml

Description

This ASIM parser supports normalizing Alert logs from all supported sources to the ASIM Alert normalized schema.

Products

This union parser includes parsers for the following products:

Product Source Parser Solutions
Bitdefender _ASim_AlertEvent_BitdefenderGravityZone GravityZone
Cisco Secure Endpoint _ASim_AlertEvent_CiscoSecureEndpoint Cisco Secure Endpoint
CrowdStrike Falcon _ASim_AlertEvent_CrowdStrikeFalcon CrowdStrike Falcon Endpoint Protection
Google SecOps _ASim_AlertEvent_GoogleSecOps GoogleSecOps
Google Threat Intelligence _ASim_AlertEvent_GoogleThreatIntelligence Google Threat Intelligence
Microsoft Defender XDR _ASim_AlertEvent_MicrosoftDefenderXDR
Netskope Security Cloud _ASim_AlertEvent_NetskopeSecurityCloud Netskopev2
Palo Alto XDR _ASim_AlertEvent_PaloAltoXDR Cortex XDR
SentinelOne _ASim_AlertEvent_SentinelOneSingularity SentinelOne (legacy connector)

Parameters

Name Type Default
pack bool False

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index