vectra_dns_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Solutions
• Connectors
• Parsers

Schema (35 columns)

Source: KQL validation test schema

Column Name	Type
answers	string
beacon_type	string
beacon_uid	string
cipher	string
duration	long
first_event_time	datetime
id_ip_ver	string
id_orig_h	string
id_orig_p	int
id_resp_h	string
id_resp_p	int
ja3	string
last_event_time	datetime
local_orig	bool
local_resp	bool
orig_hostname	string
orig_huid	string
orig_ip_bytes	long
orig_sluid	string
proto	int
protoName	string
qtype_name	string
query	string
rcode_name	string
resp_domains	dynamic
resp_hostname	string
resp_ip_bytes	long
resp_sluid	string
sensor_uid	string
server_name	string
service	string
session_count	long
TimeGenerated	datetime
ts	datetime
uid	string

Solutions (1)

This table is used by the following solutions:

• Vectra AI Stream

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
[Recommended] Vectra AI Stream via AMA

---

Parsers Using This Table (1)

Other Parsers (1)

Parser	Solution	Selection Criteria
vectra_dns	Vectra AI Stream

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index