Skip to content

Commit

Permalink
Create vimRegistryEventTemplate.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
azurekid authored Sep 27, 2023
1 parent 4f89f34 commit ff96d03
Showing 1 changed file with 41 additions and 0 deletions.
41 changes: 41 additions & 0 deletions ASIM/dev/Parser YAML templates/vimRegistryEventTemplate.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
Parser:
Title: File events ASIM parser for <product name>
Version: '<parser version>'
LastUpdated: <parser update date>
Product:
Name: <product name>
Normalization:
Schema: FileEvent
Version: '<current schema version>'
References:
- Title: ASIM File Event Schema
Link: https://aka.ms/ASimFileEventDoc
- Title: ASIM
Link: https://aka.ms/AboutASIM
Description: |
This ASIM parser supports normalizing the <product name> logs to the ASIM file activity normalized schema.
ParserName: <parser function name>
ParserParams:
- Name: starttime
Type: datetime
Default: datetime(null)
- Name: endtime
Type: datetime
Default: datetime(null)
- Name: disabled
Type: bool
Default: false
ParserQuery: |
let parser = (
starttime:datetime = datetime(null)
, endtime:datetime = datetime(null)
, disabled:bool = false
)
{
<parser query body>
};
parser (
starttime = starttime
, endtime = endtime
, disabled = disabled
)

0 comments on commit ff96d03

Please sign in to comment.