RedSiftAuth_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Attribute	Value
Supports Transformations	✗ No
Ingestion API Supported	✓ Yes
Lake-Only Ingestion	✗ No (source)

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (19 columns)

Source: Connector definition

Column Name	Type
ActivityId	int
ActivityName	string
ActorUserEmail	string
ActorUserUid	string
CategoryName	string
CategoryUid	int
ClassName	string
ClassUid	int
EventTime	datetime
HttpUserAgent	string
Id	string
ServiceName	string
Severity	string
SeverityId	int
SrcIp	string
TimeGenerated	datetime
TypeUid	int
UserEmail	string
UserUid	string

Solutions (1)

This table is used by the following solutions:

• Red Sift

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
Red Sift Events (CCP Push)

---

Content Items Using This Table (2)

Analytic Rules (2)

In solution Red Sift:

Analytic Rule	Selection Criteria
Red Sift - Login from previously unseen IP address
Red Sift - MFA disabled on account

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index