Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| alias | string |
| attribute | string |
| browse_path_element_link_id | string |
| content_filter_filter_operand_link_id | string |
| id_orig_h | string |
| id_orig_p | int |
| id_resp_h | string |
| id_resp_p | int |
| index_range | string |
| node_id_encoding_mask | string |
| node_id_guid | string |
| node_id_namespace_idx | long |
| node_id_numeric | long |
| node_id_opaque | string |
| node_id_string | string |
| path | string |
| system_name | string |
| TimeGenerated | datetime |
| ts | datetime |
| Type | string |
| uid | string |
| write_ts | datetime |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_opcua_binary_event_filter_attribute_operand | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊