Added missing field in Tableschema validation file to fix the KQLVali…

…dation error.
Azure · Aug 28, 2023 · 1d23fd4 · 1d23fd4
1 parent 9ef1445
commit 1d23fd4
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json b/.script/tests/KqlvalidationsTests/CustomTables/SentinelOne_CL.json
@@ -389,6 +389,10 @@
     "Name": "_ResourceId",
     "Type": "string"
   },
+  {
+    "Name": "_ItemId",
+    "Type": "string"
+  },
   {
     "Name": "alertInfo_indicatorDescription_s",
     "Type": "string"

diff --git a/Sample Data/ASIM/SentinelOne_CL_Schema.csv b/Sample Data/ASIM/SentinelOne_CL_Schema.csv
@@ -311,3 +311,4 @@ RawData,6,"System.String",string
 "activeDirectory_lastUserDistinguishedName_s",309,"System.String",string
 Type,310,"System.String",string
 "_ResourceId",311,"System.String",string
+"_ItemId",312,"System.String",string