Corelight_v3_anomaly_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Attribute	Value
Ingestion API Supported	✓ Yes

Schema (62 columns)

Source: KQL validation test schema

Column Name	Type
anomaly_type	string
entity	string
entity_training_items	dynamic
history	real
history_days	long
ignorable	bool
item	string
item_assoc_entities	dynamic
item_assoc_entities_similarity	dynamic
item_score	real
nn10_entities	dynamic
nn10_entity_similarity	real
nn10_pred_items	dynamic
nn10_train_items	dynamic
nn1_entities	dynamic
nn1_entity_similarity	real
nn1_pred_items	dynamic
nn1_train_items	dynamic
nn2_entities	dynamic
nn2_entity_similarity	real
nn2_pred_items	dynamic
nn2_train_items	dynamic
nn3_entities	dynamic
nn3_entity_similarity	real
nn3_pred_items	dynamic
nn3_train_items	dynamic
nn4_entities	dynamic
nn4_entity_similarity	real
nn4_pred_items	dynamic
nn4_train_items	dynamic
nn5_entities	dynamic
nn5_entity_similarity	real
nn5_pred_items	dynamic
nn5_train_items	dynamic
nn6_entities	dynamic
nn6_entity_similarity	real
nn6_pred_items	dynamic
nn6_train_items	dynamic
nn7_entities	dynamic
nn7_entity_similarity	real
nn7_pred_items	dynamic
nn7_train_items	dynamic
nn8_entities	dynamic
nn8_entity_similarity	real
nn8_pred_items	dynamic
nn8_train_items	dynamic
nn9_entities	dynamic
nn9_entity_similarity	real
nn9_pred_items	dynamic
nn9_train_items	dynamic
original_entity	string
path	string
system_name	string
TimeGenerated	datetime
ts	datetime
Type	string
uid	string
use_case	string
use_case_description	string
usecase	string
usecase_description	string
write_ts	datetime