Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
This summary rule aggregates network session logs from Zscaler Internet Access devices, providing hourly insights into session count, data sent, data received by device actions, destination port, protocol, source and destination IP addresses.
| Attribute | Value |
|---|---|
| Type | Summary Rule |
| Solution | Standalone Content |
| ID | 6457ab65-69ea-4444-981d-1ecaf414fda7 |
| Required Connectors | CefAma |
| Source | [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Summary rules/Network/ZscalarNetworkSessionIPSummary.yaml) |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
CommonSecurityLog |
DeviceProduct == "NSSFWlog"DeviceVendor == "Zscaler" |
✓ | ✓ | ✓ |
The following connectors provide data for this content item:
Solutions: Common Event Format, VirtualMetric DataStream, Zscaler Internet Access
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊