Audit Event ASIM parser for SQLSecurityAudit Logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimAuditEventSQLSecurityAudit |
| Built-in Parser | _ASim_AuditEvent_SQLSecurityAudit |
| Schema | AuditEvent |
| Schema Version | 0.1.2 |
| Parser Type | 🔌 Source (product-specific) |
| Product | SQLSecurityAudit Logs |
| Parser Version | 0.1.0 (version history) |
| Last Updated | Mar 11, 2026 |
| Unifying Parser | ASimAuditEvent |
| Source File | Parsers\ASimAuditEvent\Parsers\ASimAuditEventSQLSecurityAudit.yaml |
Description
This ASIM parser supports normalizing Azure SQL Security Audit events from the SQLSecurityAuditEvents table and the AzureDiagnostics table (with Category 'SQLSecurityAuditEvents') to the ASIM Audit Event schema.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
AzureDiagnostics 🔶 |
Category == "SQLSecurityAuditEvents" |
? | ✗ | ? |
SQLSecurityAuditEvents |
✓ | ✗ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
pack |
bool | False |
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊