Armis Security Parsing Rule

Parsing Rule

Armis

Details

IDarmis_security_ParsingRule
From Version6.10.0

Rules (XQL)

[INGEST:vendor="armis", product="security", target_dataset="armis_security_raw" , no_hit=keep]
alter _time = time;