Corelight_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Custom Log V1	Yes 🔶 — uses type-suffixed column names
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Parsers

Schema (12 columns)

Source: KQL validation test schema

Column Name	Type
_ResourceId	string
Computer	string
hostname_s	string
log_file_s	string
ManagementGroupName	string
Message	string
MG	string
RawData	string
SourceSystem	string
TenantId	string
TimeGenerated	datetime
Type	string

Solutions (1)

This table is used by the following solutions:

• Corelight

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Corelight Connector Exporter

---

Parsers Using This Table (2)

ASIM Parsers (2)

Parser	Schema	Product	Selection Criteria
ASimDnsCorelightZeek	Dns	Corelight Zeek
ASimNetworkSessionCorelightZeek	NetworkSession	Corelight Zeek

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index