Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _path_s | string |
| _system_name_s | string |
| _write_ts_t | datetime |
| active_dns_requests_d | real |
| active_files_d | real |
| active_icmp_conns_d | real |
| active_tcp_conns_d | real |
| active_timers_d | real |
| active_udp_conns_d | real |
| bytes_recv_d | real |
| dns_requests_d | real |
| events_proc_d | real |
| events_queued_d | real |
| files_d | real |
| icmp_conns_d | real |
| mem_d | real |
| peer_s | string |
| pkt_lag_d | real |
| pkts_dropped_d | real |
| pkts_link_d | real |
| pkts_proc_d | real |
| reassem_file_size_d | real |
| reassem_frag_size_d | real |
| reassem_tcp_size_d | real |
| reassem_unknown_size_d | real |
| tcp_conns_d | real |
| TimeGenerated | datetime |
| timers_d | real |
| ts_t | datetime |
| udp_conns_d | real |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Alert_Aggregations | |
| Corelight_Data_Explorer | |
| Corelight_Security_Workflow |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_stats | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊