Azure FlowLogs Modeling Rule

Modeling Rule

AzureFlowLogs

Details

IDAzure_FlowLogs_ModelingRule
From Version8.5.0

Schema

msft_azure_flowlogs_raw

Field Type Array?
_raw_log string
bytesDtoS int
bytesStoD int
category string
destinationAddress string
destinationPort int
deviceAction string
deviceDirection string
flowState string
mac string
nsgRuleName string
operationName string
packetsDtoS int
packetsStoD int
resourceId string
sourceAddress string
sourcePort int
transportProtocol string
fromversion: 8.5.0
id: Azure_FlowLogs_ModelingRule
name: Azure FlowLogs Modeling Rule
rules: ''
schema: ''
tags: ''