Armis_Alerts_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Parsers

Schema (29 columns)

Source: KQL validation test schema

Column Name	Type
_ResourceId	string
ActivityUUIDs	string
AffectedDevicesCount	real
AlertId	real
AlertType	string
Armis_Alert_Time	datetime
Classification	string
Computer	string
ConnectionIds	string
Description	string
DestinationEndpoints	string
DeviceIds	string
EventProduct	string
EventVendor	string
LastAlertUpdateTime	datetime
ManagementGroupName	string
MG	string
MitreAttackLabels	string
PolicyId	string
PolicyLabels	string
PolicyTitle	string
RawData	string
Severity	string
SourceEndpoints	string
SourceSystem	string
Status	string
StatusChangeTime	datetime
TenantId	string
TimeGenerated	datetime

Solutions (1)

This table is used by the following solutions:

• Armis

Connectors (2)

This table is ingested by the following connectors:

Connector	Selection Criteria
Armis Alerts
Armis Alerts Activities

---

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
ArmisAlerts	Armis

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index