Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| byte_drops | real |
| byte_writes | real |
| cap_bytes | real |
| cap_flows | real |
| flow_pauses | real |
| flow_resumes | real |
| flows_buffered | real |
| lever_failures | real |
| lever_triggers | real |
| packet_drops | real |
| packet_writes | real |
| path | string |
| rule_stats | string |
| socket_closes | real |
| socket_connects | real |
| socket_errors | real |
| socket_timeouts | real |
| socket_writes | real |
| system_name | string |
| TimeGenerated | datetime |
| ts | datetime |
| Type | string |
| uncap_flows_buflimit | real |
| uncap_flows_closed | real |
| unknown_bytes | real |
| unknown_packets | real |
| write_ts | datetime |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Corelight Connector Exporter |
In solution Corelight:
| Workbook | Selection Criteria |
|---|---|
| Corelight_Data_Explorer | |
| Corelight_Security_Workflow |
| Parser | Solution | Selection Criteria |
|---|---|---|
| corelight_smartpcap_stats | Corelight |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊