Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
Internal Use Table: This table is created and used internally by the following solutions: Infoblox, Infoblox SOC Insights. It is written to by playbooks for solution-specific data storage.
| Attribute | Value |
|---|---|
| Category | Internal |
| Ingestion API Supported | ✓ Yes |
Source: KQL validation test schema
| Column Name | Type |
|---|---|
| _ResourceId | string |
| action | string |
| actor_name | string |
| Computer | string |
| detected_at | string |
| device_country | string |
| device_ip | string |
| device_name | string |
| device_region | string |
| dhcp_fingerprint | string |
| dns_view | string |
| feed | string |
| indicator | string |
| InfobloxInsightID | string |
| InfobloxInsightLogType | string |
| mac_address | string |
| ManagementGroupName | string |
| MG | string |
| os_version | string |
| policy | string |
| query | string |
| query_type | string |
| RawData | string |
| response | string |
| response_country | string |
| response_region | string |
| source | string |
| SourceSystem | string |
| tclass | string |
| TenantId | string |
| tfamily | string |
| threat_confidence | string |
| threat_level | string |
| TimeGenerated | datetime |
| tproperty | string |
| Type | string |
| user | string |
Official Microsoft Learn documentation for field/column information:
This table is used by the following solutions:
In solution Infoblox:
| Workbook | Selection Criteria |
|---|---|
| Infoblox_Workbook |
In solution Infoblox SOC Insights:
| Workbook | Selection Criteria |
|---|---|
| InfobloxSOCInsightsWorkbook |
| Parser | Solution | Selection Criteria |
|---|---|---|
| InfobloxInsightEvents | Infoblox | |
| InfobloxInsightEvents | Infoblox SOC Insights |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊