ASIM DNS activity ASIM parser for Zscaler ZIA

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index


Parser Information

Property Value
Parser Name ASimDnsZscalerZIA
Built-in Parser _ASim_Dns_ZscalerZIA
Schema Dns
Schema Version 0.1.3
Parser Type 🔌 Source (product-specific)
Product Zscaler ZIA DNS
Parser Version 0.6 (version history)
Last Updated Feb 19 2023
Unifying Parser ASimDns
Source File Parsers\ASimDns\Parsers\ASimDnsZscalerZIA.yaml

Description

This ASIM parser supports normalizing Zscaler ZIA DNS logs to the ASIM Dns normalized schema.

Source Tables

This parser reads from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceProduct == "NSSDNSlog"

Parameters

Name Type Default
disabled bool False

Associated Connectors

The following connectors provide data for this parser:

Connector Solution
CefAma Common Event Format
VirtualMetricDirectorProxy VirtualMetric DataStream
VirtualMetricMSSentinelConnector VirtualMetric DataStream
VirtualMetricMSSentinelDataLakeConnector VirtualMetric DataStream

Solutions: Common Event Format, VirtualMetric DataStream

References


Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to ASIM Index