VMware_VECO_EventLogs_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Attribute	Value
Ingestion API Supported	✓ Yes

Contents

• Schema
• Schema References
• Solutions
• Connectors
• Content Items

Schema (7 columns)

Source: KQL validation test schema

Column Name	Type
category	string
detail	string
event	string
eventTime	datetime
message	string
severity	string
TimeGenerated	datetime

Schema References

Official Microsoft Learn documentation for field/column information:

• Data Source Schema Reference

Solutions (1)

This table is used by the following solutions:

• VMware SASE

Connectors (1)

This table is ingested by the following connectors:

Connector	Selection Criteria
VMware SD-WAN and SASE Connector

---

Content Items Using This Table (9)

Analytic Rules (8)

In solution VMware SASE:

Analytic Rule	Selection Criteria
VMware Cloud Web Security - Policy Change Detected
VMware Cloud Web Security - Policy Publish Event
VMware Edge Cloud Orchestrator - New LAN-Side Client Device Detected
VMware SD-WAN - Orchestrator Audit Event
VMware SD-WAN Edge - All Cloud Security Service Tunnels DOWN
VMware SD-WAN Edge - Device Congestion Alert - Packet Drops
VMware SD-WAN Edge - IDS/IPS Signature Update Failed
VMware SD-WAN Edge - IDS/IPS Signature Update Succeeded

Workbooks (1)

In solution VMware SASE:

Workbook	Selection Criteria
VMwareSASESOCDashboard

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index