Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Google ApigeeX data connector provides the capability to ingest Audit logs into Microsoft Sentinel using the Google Apigee API. Refer to Google Apigee API documentation for more information.
Table attributes
Attribute | Value |
---|---|
Resource types | - |
Categories | Security |
Solutions | SecurityInsights |
Basic log | Yes |
Ingestion-time transformation | No |
Sample Queries | - |
Columns
Column | Type | Description |
---|---|---|
_BilledSize | real | The record size in bytes |
GCPResource | dynamic | Describes the resource associated with the log entry, including labels and resource type. |
InsertId | string | A unique identifier for the log entry. |
_IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
LogName | string | The full log name including resource path. |
Operation | dynamic | Contains details about the operation being performed, including the operation ID, producer, and status information. |
ProtoPayload | dynamic | Holds the structured audit log data, including authentication, method name, resource name, and service-specific information. |
ReceiveTimestamp | datetime | Time the log entry was received by Cloud Logging. |
Severity | string | Indicates the severity level of the log entry or event |
SourceSystem | string | The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics |
TenantId | string | The Log Analytics workspace ID |
TimeGenerated | datetime | The timestamp indicating when the log entry was created or received. |
Timestamp | datetime | The original timestamp of the event as recorded by the source system. |
Type | string | The name of the table |