ASIM Audit event ASIM parser

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to ASIM Index

Parser Information

Property Value
Parser Name ASimAuditEvent
Built-in Parser _ASim_AuditEvent
Schema AuditEvent
Schema Version 0.1
Parser Type 📦 Union (schema-level)
Parser Version 0.1.7 (version history)
Last Updated March 10, 2026
Source File Parsers\ASimAuditEvent\Parsers\ASimAuditEvent.yaml

Description

This ASIM parser supports normalizing audit events from all supported sources to the ASIM Audit Event activity normalized schema.

Products

This union parser includes parsers for the following products:

Product Source Parser Solutions
AWS CloudTrail _ASim_AuditEvent_AWSCloudTrail Amazon Web Services
Microsoft Azure _ASim_AuditEvent_AzureActivity Azure Activity
Azure Key Vault _ASim_AuditEvent_AzureKeyVault
Barracuda WAF _ASim_AuditEvent_BarracudaCEF Common Event Format
VirtualMetric DataStream
Zscaler Internet Access
Barracuda WAF _ASim_AuditEvent_BarracudaWAF
Cisco ISE _ASim_AuditEvent_CiscoISE Syslog
Cisco Meraki _ASim_AuditEvent_CiscoMeraki CiscoMeraki
CustomLogsAma
Cisco Meraki _ASim_AuditEvent_CiscoMerakiSyslog Syslog
CrowdStrike Falcon Endpoint Protection _ASim_AuditEvent_CrowdStrikeFalconHost Common Event Format
VirtualMetric DataStream
Zscaler Internet Access
Illumio Core _ASim_AuditEvent_IllumioSaaSCore IllumioSaaS
Infoblox BloxOne _ASim_AuditEvent_InfobloxBloxOne Common Event Format
VirtualMetric DataStream
Zscaler Internet Access
Microsoft Windows _ASim_AuditEvent_MicrosoftEvent
Microsoft SharePoint _ASim_AuditEvent_MicrosoftExchangeAdmin365
Microsoft Windows _ASim_AuditEvent_MicrosoftSecurityEvents Windows Security Events
Microsoft Windows _ASim_AuditEvent_MicrosoftWindowsEvents Windows Forwarded Events
Native _ASim_AuditEvent_Native Cisco Meraki Events via REST API
SynqlyIntegrationConnector
Workday
SQLSecurityAudit Logs _ASim_AuditEvent_SQLSecurityAudit
SentinelOne _ASim_AuditEvent_SentinelOne
VMware Carbon Black Cloud _ASim_AuditEvent_VMwareCarbonBlackCloud
Vectra _ASim_AuditEvent_VectraXDRAudit Vectra XDR

Parameters

Name Type Default
pack bool False

References

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to ASIM Index