SOCPrimeAuditLogs_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Content Items

Schema (10 columns)

Source: Connector definition

Column Name	Type	Description
EventName	string	Event Name
EventProduct	string
EventType	string
EventVendor	string
HttpUserAgent	string
SourceIp	string
TimeGenerated	datetime	The timestamp (UTC) reflecting the time in which the event was generated.
Uri	string
UserEmail	string
UserName	string

Solutions (1)

This table is used by the following solutions:

• SOC Prime CCF

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
SOC Prime Platform Audit Logs Data Connector

---

Content Items Using This Table (3)

Analytic Rules (3)

In solution SOC Prime CCF:

Analytic Rule	Selection Criteria
Deleted a Custom Field Mapping profile
Deleted a Tenant
Successful logins to SOC Prime platform from bad IP addresses

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index