update

Azure · Jan 8, 2025 · f66bb7d · f66bb7d
1 parent a7d4468
commit f66bb7d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/Parsers/ASimAuditEvent/Parsers/ASimAuditEventNative.yaml b/Parsers/ASimAuditEvent/Parsers/ASimAuditEventNative.yaml
@@ -32,6 +32,7 @@ ParserQuery: |
           Dst = coalesce (TargetDvcId, TargetHostname, TargetIpAddr, TargetAppId, TargetAppName),
           Dvc = coalesce (DvcFQDN, DvcHostname, DvcIpAddr, DvcId, _ResourceId, strcat (EventVendor,'/', EventProduct)), 
           Rule=RuleName,
+          IpAddr=SrcIpAddr,
           EventStartTime = TimeGenerated,
           EventEndTime = TimeGenerated
       | project-away

diff --git a/Parsers/ASimAuditEvent/Parsers/vimAuditEventNative.yaml b/Parsers/ASimAuditEvent/Parsers/vimAuditEventNative.yaml
@@ -81,6 +81,7 @@ ParserQuery: |
           Dst = coalesce (TargetDvcId, TargetHostname, TargetIpAddr, TargetAppId, TargetAppName),
           Dvc = coalesce (DvcFQDN, DvcHostname, DvcIpAddr, DvcId, _ResourceId, strcat (EventVendor,'/', EventProduct)),
           Rule=RuleName,
+          IpAddr=SrcIpAddr,
           EventStartTime = TimeGenerated,
           EventEndTime = TimeGenerated
       | project-away