Corelight_v3_openflow_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (39 columns)

Source: KQL validation test schema

Column Name Type
dpid long
flow_mod_actions_dl_dst string
flow_mod_actions_dl_src string
flow_mod_actions_nw_dst string
flow_mod_actions_nw_src string
flow_mod_actions_nw_tos long
flow_mod_actions_out_ports dynamic
flow_mod_actions_tp_dst long
flow_mod_actions_tp_src long
flow_mod_actions_vlan_pcp long
flow_mod_actions_vlan_strip bool
flow_mod_actions_vlan_vid long
flow_mod_command string
flow_mod_cookie long
flow_mod_flags long
flow_mod_hard_timeout long
flow_mod_idle_timeout long
flow_mod_out_group long
flow_mod_out_port long
flow_mod_priority long
flow_mod_table_id long
match_dl_dst string
match_dl_src string
match_dl_type long
match_dl_vlan long
match_dl_vlan_pcp long
match_in_port long
match_nw_dst string
match_nw_proto long
match_nw_src string
match_nw_tos long
match_tp_dst long
match_tp_src long
path string
system_name string
TimeGenerated datetime
ts datetime
Type string
write_ts datetime

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
Corelight Connector Exporter

Content Items Using This Table (2)

Workbooks (2)

In solution Corelight:

Workbook Selection Criteria
Corelight_Data_Explorer
Corelight_Security_Workflow

Parsers Using This Table (1)

Other Parsers (1)

Parser Solution Selection Criteria
corelight_openflow Corelight

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index