Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Custom Log V1 | Yes 🔶 — uses type-suffixed column names |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _id_s | string |
| _ResourceId | string |
| audit_log_event_s | string |
| ccl_s | string |
| Computer | string |
| count_d | real |
| details_s | string |
| ManagementGroupName | string |
| MG | string |
| organization_unit_s | string |
| RawData | string |
| sAMAccountName_s | string |
| severity_level_d | real |
| SourceSystem | string |
| supporting_data_data_type_s | string |
| supporting_data_data_values_s | string |
| TenantId | string |
| TimeGenerated | datetime |
| timestamp_d | real |
| Type | string |
| type_s | string |
| ur_normalized_s | string |
| user_s | string |
| userPrincipalName_s | string |
This table is used by the following solutions:
This table is ingested by the following connectors:
| Connector | Selection Criteria |
|---|---|
| Netskope Data Connector |
| Parser | Solution | Selection Criteria |
|---|---|---|
| EventsAudit | Netskopev2 |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊