User Management ASIM parser for Microsoft Security Event logs
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Parser Information
| Property | Value |
|---|---|
| Parser Name | ASimUserManagementMicrosoftSecurityEvent |
| Built-in Parser | _ASim_UserManagement_MicrosoftSecurityEvent |
| Schema | UserManagement |
| Schema Version | 0.1.1 |
| Parser Type | 🔌 Source (product-specific) |
| Product | Microsoft Security Event |
| Parser Version | 0.2.0 (version history) |
| Last Updated | Jun 19, 2025 |
| Unifying Parser | ASimUserManagement |
| Source File | Parsers\ASimUserManagement\Parsers\ASimUserManagementMicrosoftSecurityEvent.yaml |
Description
This ASIM parser supports normalizing Microsoft Security Event logs ingested in 'SecurityEvent' table delivered using AMA to the ASIM UserManagement normalized schema.
Source Tables
This parser reads from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
SecurityEvent |
EventID in "4744,4748,4749,4753,4759,4763" |
✓ | ✓ | ? |
Parameters
| Name | Type | Default |
|---|---|---|
disabled |
bool | False |
Associated Connectors
The following connectors provide data for this parser:
| Connector | Solution |
|---|---|
| WindowsSecurityEvents | Windows Security Events |
Solutions: Windows Security Events
References
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊