SecurityBaselineSummary

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

Reference for SecurityBaselineSummary table in Azure Monitor Logs.

Attribute Value
Category Security
Basic Logs Eligible ✗ No (source)
Supports Transformations ✓ Yes (source)
Ingestion API Supported ✗ No
Azure Monitor Tables Reference View Documentation

Contents

Schema (25 columns)

Source: Azure Monitor documentation

Column Name Type Description
_BilledSize real The record size in bytes
_IsBillable string Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account
_ResourceId string A unique identifier for the resource that the record is associated with
_SubscriptionId string A unique identifier for the subscription that the record is associated with
AssessmentId string
BaselineType string
Computer string
ComputerEnvironment string
CriticalFailedRules int
InformationalFailedRules int
ManagementGroupName string
OSName string
PercentageOfPassedRules int
Resource string
ResourceGroup string
ResourceId string
ResourceProvider string
ResourceType string
SourceComputerId string
SourceSystem string The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics
SubscriptionId string
TimeGenerated datetime
TotalAssessedRules int
Type string The name of the table
WarningFailedRules int

Solutions (1)

This table is used by the following solutions:

Content Items Using This Table (3)

Workbooks (3)

In solution SOC Handbook:

Workbook Selection Criteria
InvestigationInsights

GitHub Only:

Workbook Selection Criteria
ASC-ComplianceandProtection
InvestigationInsights

Resource Types

This table collects data from the following Azure resource types:

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index