| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| _ResourceId |
A unique identifier for the resource that the record is associated with |
String |
| _SubscriptionId |
A unique identifier for the subscription that the record is associated with |
String |
| CallerIpAddress |
|
String |
| Category |
Type of threat indicator or breach activity identified by the alert |
String |
| CorrelationId |
Unique identifier of the sign-in event |
String |
| DurationMs |
|
String |
| Identity |
|
String |
| JwtId |
|
String |
| LoginServer |
|
String |
| OperationName |
Audit event operation name as appeared in the raw event schema. Usually includes both resource type and operation |
String |
| Region |
|
String |
| ResultDescription |
Additional description of the operation’s result |
String |
| ResultType |
Result of the operation. Possible values: Success, Failure |
String |
| SourceSystem |
|
String |
| TenantId |
Unique identifier of the tenant into which the data connector ingests data. |
String |
| TimeGenerated |
|
DateTime |
| Type |
The name of the table |
String |
| UserAgent |
User agent information from the web browser or other client application |
String |