Audit Native Parser #11561
Audit Native Parser #11561
Conversation
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
Hello @Alekhya0824, Please try to add missing columns for specific tables mentioned in KQL validation failures |
…Sentinel into native_Audit_Parser
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
…Sentinel into native_Audit_Parser
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
… native_Audit_Parser
…Sentinel into native_Audit_Parser
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
|
ASIM parsers have been changed. ARM templates were regenerated from the updated KQL function YAML files. |
Required items, please complete
Change(s):
created native AuditEvent parser for both vim and asim and added these names in AsimAuditEvent.yaml and imAuditEvent.yaml
Reason for Change(s):
native parser is not there for authentication so created
Version Updated:
yes
Testing Completed:
yes
Checked that the validations are passing and have addressed any issues that are present:
yes