Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _path_s | string |
| _system_name_s | string |
| _write_ts_s | string |
| brand_s | string |
| classification_ts_s | string |
| confidence_d | real |
| device_type_s | string |
| ip_s | string |
| mac_s | string |
| model_s | string |
| os_name_s | string |
| os_ver_s | string |
| sources_s | string |
| TenantId | string |
| TimeGenerated | datetime |
| ts_t | datetime |
| type_group_s | string |
| type_name_s | string |
| vendor_mac_s | string |
This table is used by the following solutions:
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Data_Explorer |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_asset_classification | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊