Event Publishing Wizard - Edit Mode

Event Name

Native Name

Service

SK4 Unified Event

Event Type

Status

SK4 Version

Splunk Data Exists

Created Date

Sun Dec 16 2018 13:32:08 GMT+0000 (Coordinated Universal Time)

Last Update

Tue Jun 18 2019 11:13:48 GMT+0000 (Coordinated Universal Time)

Description

SPL Query

ELK Query

Development Notes

Raw Data

CEF:0|Skyformation|SkyFormation Cloud Apps Security|2.0.0|sk4-resource-content-updated|resource-content-updated|0|cat=application-data cs6Label=raw-event destinationServiceName=Azure deviceInboundInterface=F5C1B34B-A4A6-4BAA-B336-567A6ECB4454 devicePayloadId=id : [5f491a61-5e41-4d79-bde5-010c9d22b907] ; name : [Pay-As-You-Go] dproc=Storage Analytics - [Storage Account ID: /subscriptions/5f491a61-5e41-4d79-bde5-010c9d22b907/resourceGroups/for-integration-tests/providers/Microsoft.Storage/storageAccounts/forintegrationtests758] dtz=default-tenant end=1560726082134 fileHash=table filePath=/forintegrationtests758 fileType=table flexString1=EntityGroupTransaction flexString1Label=application-action fname=forintegrationtests758 msg=Resource [Resource: table :: forintegrationtests758, related to resource: storage-account :: forintegrationtests758] was content updated by [System] oldFileId=/subscriptions/5f491a61-5e41-4d79-bde5-010c9d22b907/resourceGroups/for-integration-tests/providers/Microsoft.Storage/storageAccounts/forintegrationtests758 oldFileName=forintegrationtests758 oldFileType=storage-account request=Success requestClientApplication=azure-100 requestCookies=Success sourceServiceName=azure src=10.57.36.140:39148 suid=system suser=system ext_requesterIPAddress=10.57.36.140:39148 ext_endToEndLatencyInMS=67 ext_serviceType=table ext_requestStartTime=1560726082134 ext_responseHeaderSize=264 ext_authenticationType=authenticated ext_serverLatencyInMS=20 ext_requestedObjectKey=/forintegrationtests758 ext_clientRequestId=F5C1B34B-A4A6-4BAA-B336-567A6ECB4454 ext_responsePacketSize=1044 ext_operationType=EntityGroupTransaction ext_ownerAccountName=forintegrationtests758 ext_requestHeaderSize=542 ext_userAgentHeader=Azure-Storage/2.3.0 (Native) ext_requestUrl=https://forintegrationtests758.table.core.windows.net:443/$batch?timeout\=30 ext_requestContentLength=1079 ext_requestVersionHeader=2015-04-05 ext_httpStatusCode=202 ext_requestPacketSize=1079 ext_requesterAccountName=forintegrationtests758 ext_versionNumber=1.0 ext_requestIdHeader=ad175ace-2002-0070-2d97-245b39000000 ext_operationCount=0 ext_originStorageAccountId=/subscriptions/5f491a61-5e41-4d79-bde5-010c9d22b907/resourceGroups/for-integration-tests/providers/Microsoft.Storage/storageAccounts/forintegrationtests758 ext_requestStatus=Success cs6={"versionNumber":"1.0","requestStartTime":1560726082134,"operationType":"EntityGroupTransaction","requestStatus":"Success","httpStatusCode":"202","endToEndLatencyInMS":67,"serverLatencyInMS":20,"authenticationType":"authenticated","requesterAccountName":"forintegrationtests758","ownerAccountName":"forintegrationtests758","serviceType":"table","requestUrl":"https://forintegrationtests758.table.core.windows.net:443/$batch?timeout\=30","requestedObjectKey":"/forintegrationtests758","requestIdHeader":"ad175ace-2002-0070-2d97-245b39000000","operationCount":0,"requesterIPAddress":"10.57.36.140:39148","requestVersionHeader":"2015-04-05","requestHeaderSize":542,"requestPacketSize":1079,"responseHeaderSize":264,"responsePacketSize":1044,"requestContentLength":1079,"requestMD5":null,"serverMD5":null,"eTagIdentifier":null,"lastModifiedTime":null,"conditionsUsed":null,"userAgentHeader":"Azure-Storage/2.3.0 (Native)","referrerHeader":null,"clientRequestId":"F5C1B34B-A4A6-4BAA-B336-567A6ECB4454","originStorageAccountId":"/subscriptions/5f491a61-5e41-4d79-bde5-010c9d22b907/resourceGroups/for-integration-tests/providers/Microsoft.Storage/storageAccounts/forintegrationtests758","etagIdentifier":null}

Supported also on