Network Session ASIM parser for AWS VPC logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimNetworkSessionAWSVPC |
| Built-in Parser | _ASim_NetworkSession_AWSVPC |
| Schema | NetworkSession |
| Schema Version | 0.2.2 |
| Parser Type | 🔌 Source (product-specific) |
| Product | AWS VPC |
| Parser Version | 0.3 (version history) |
| Last Updated | Dec 11, 2022 |
| Unifying Parser | ASimNetworkSession |
| Source File | Parsers\ASimNetworkSession\Parsers\ASimNetworkSessionAWSVPC.yaml |
Description
This ASIM parser supports normalizing AWS VPC logs produced by the Microsoft Sentinel AWS S3 connector to the ASIM Network Session normalized schema.
Source Tables
This parser reads from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
AWSVPCFlow |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| AWSS3VPCFlowLogsParquetDefinition | AWS VPC Flow Logs |
Solutions: AWS VPC Flow Logs
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊