Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
This summary rule aggregates network session logs from Palo Alto PAN-OS devices, providing hourly insights into session count, data sent, data received by device actions, destination port, source and destination IP addresses.
| Attribute | Value |
|---|---|
| Type | Summary Rule |
| Solution | Standalone Content |
| ID | 29e6b3fb-5942-4a1a-95da-2c0821863e90 |
| Required Connectors | CefAma |
| Source | [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Summary rules/Network/PaloAltoPANOSNetworkSessionIPSummary.yaml) |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
CommonSecurityLog |
Activity == "TRAFFIC"DeviceProduct == "PAN-OS"DeviceVendor == "Palo Alto Networks" |
✓ | ✓ | ✓ |
The following connectors provide data for this content item:
Solutions: Common Event Format, VirtualMetric DataStream
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊