ASIM ASIM Authentication parser for Barracuda WAF

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimAuthenticationBarracudaWAF
Built-in Parser _ASim_Authentication_BarracudaWAF
Schema Authentication
Schema Version 0.1.3
Parser Type 🔌 Source (product-specific)
Product Barracuda WAF
Parser Version 0.1.0 (version history)
Last Updated Jun 13 2023
Unifying Parser ASimAuthentication
Source File Parsers\ASimAuthentication\Parsers\ASimAuthenticationBarracudaWAF.yaml

Description

This ASIM parser supports normalizing the Barracuda WAF logs to the ASIM authentication normalized schema.

Source Tables

This parser reads from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceProduct in "WAAS,WAF"
DeviceVendor startswith "Barracuda"
?
barracuda_CL 🔶 ? ?

Parameters

Name Type Default
disabled bool False

Associated Connectors

The following connectors provide data for this parser:

Connector Solution
CefAma Common Event Format
CloudNSSAuditLogs_ccp Zscaler Internet Access
CloudNSSCASBActivityLogs_ccp Zscaler Internet Access
CloudNSSCASBCRMLogs_ccp Zscaler Internet Access
CloudNSSCASBCloudStorageLogs_ccp Zscaler Internet Access
CloudNSSCASBCollabLogs_ccp Zscaler Internet Access
CloudNSSCASBEmailLogs_ccp Zscaler Internet Access
CloudNSSCASBFileSharingLogs_ccp Zscaler Internet Access
CloudNSSCASBITSMLogs_ccp Zscaler Internet Access
CloudNSSCASBRepoLogs_ccp Zscaler Internet Access
CloudNSSDNSLogs_ccp Zscaler Internet Access
CloudNSSEmailDLPLogs_ccp Zscaler Internet Access
CloudNSSEndpointDLPLogs_ccp Zscaler Internet Access
CloudNSSFWLogs_ccp Zscaler Internet Access
CloudNSSTunnelLogs_ccp Zscaler Internet Access
CloudNSSWebLogs_ccp Zscaler Internet Access
VirtualMetricDirectorProxy VirtualMetric DataStream
VirtualMetricMSSentinelConnector VirtualMetric DataStream
VirtualMetricMSSentinelDataLakeConnector VirtualMetric DataStream

Solutions: Common Event Format, VirtualMetric DataStream, Zscaler Internet Access

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to ASIM Index