You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sentinel/normalization.md
+8-3Lines changed: 8 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -96,9 +96,14 @@ On the other hand, while ASIM parsers are optimized, query time parsing can slow
96
96
Currently, ASIM supports the following native normalized tables as a destination for ingest time normalization:
97
97
98
98
-[**ASimAuditEventLogs**](/azure/azure-monitor/reference/tables/asimauditeventlogs) for the [Audit Event](normalization-schema-audit.md) schema.
99
-
-**ASimAuthenticationEventLogs** for the [Authentication](normalization-schema-authentication.md) schema.
99
+
-[**ASimAuthenticationEventLogs**](/azure/azure-monitor/reference/tables/asimauthenticationeventlogs) for the [Authentication](normalization-schema-authentication.md) schema.
100
+
-[**ASimDhcpEventLogs**](/azure/azure-monitor/reference/tables/asimdhcpeventlogs) for the [DHCP Event](normalization-schema-dhcp.md) schema.
100
101
-[**ASimDnsActivityLogs**](/azure/azure-monitor/reference/tables/asimdnsactivitylogs) for the [DNS](normalization-schema-dns.md) schema.
101
-
-[**ASimNetworkSessionLogs**](/azure/azure-monitor/reference/tables/asimnetworksessionlogs) for the [Network Session](normalization-schema-network.md) schema
102
+
-[**ASimFileEventLogs**](/azure/azure-monitor/reference/tables/asimfileeventlogs) for the [File Event](normalization-schema-file-event.md) schema.
103
+
-[**ASimNetworkSessionLogs**](/azure/azure-monitor/reference/tables/asimnetworksessionlogs) for the [Network Session](normalization-schema-network.md) schema.
104
+
-[**ASimProcessEventLogs**](/azure/azure-monitor/reference/tables/asimprocesseventlogs) for the [Process Event](normalization-schema-process-event.md) schema.
105
+
-[**ASimRegistryEventLogs**](/azure/azure-monitor/reference/tables/asimregistryeventlogs) for the [Registry Event](normalization-schema-registry-event.md) schema.
106
+
-[**ASimUserManagementActivityLogs**](/azure/azure-monitor/reference/tables/asimusermanagementactivitylogs) for the [User Management](normalization-schema-user-management.md) schema.
102
107
-[**ASimWebSessionLogs**](/azure/azure-monitor/reference/tables/asimwebsessionlogs) for the [Web Session](normalization-schema-web.md) schema.
103
108
104
109
For more information, see [Ingest Time Normalization](normalization-ingest-time.md).
@@ -132,4 +137,4 @@ For more information, see:
132
137
- Watch the [ASIM Webinar](https://www.youtube.com/watch?v=WoGD-JeC7ng) or review the [slides](https://1drv.ms/b/s!AnEPjr8tHcNmjDY1cro08Fk3KUj-?e=murYHG)
133
138
-[Advanced Security Information Model (ASIM) schemas](normalization-about-schemas.md)
134
139
-[Advanced Security Information Model (ASIM) parsers](normalization-parsers-overview.md)
135
-
-[Advanced Security Information Model (ASIM) content](normalization-content.md)
140
+
-[Advanced Security Information Model (ASIM) content](normalization-content.md)
0 commit comments