SecurityIoTRawEvent
Table is part of Microsoft Defender for IoT. It contains IoT raw security event properties. These logs can be used to monitor your operational, diagnostic and security raw events.
Table attributes
Attribute | Value |
---|---|
Resource types | - |
Categories | Security |
Solutions | AzureSecurityOfThings |
Basic log | No |
Ingestion-time transformation | Yes |
Sample Queries | - |
Columns
Column | Type | Description |
---|---|---|
AgentVersion | string | The version of the agent. |
AssociatedResourceId | string | The associated Azure resource ID. |
AzureSubscriptionId | string | The Azure subscription ID. |
_BilledSize | real | The record size in bytes |
DeviceId | string | The device ID. |
EventDetails | string | Additional raw event details. |
IoTRawEventId | string | The internal raw event ID. |
_IsBillable | string | Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account |
IsEmpty | bool | Property identifying if the raw event contains data. |
RawEventCategory | string | The category of the raw event - periodic or triggered. |
RawEventName | string | The name of the raw event. |
RawEventType | string | The type of the raw event - security, operational or diagnostic. |
TimeGenerated | datetime | The date and time the raw event was generated. |
TimeStamp | datetime | The date and time the raw event was first detected. |
Type | string | The name of the table |
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for