Laraib Khan

 The outcome is shown in **AdditionalExtensions** but not in its own **Outcome** field as explained in the Official Docs. 

[query_data (1).csv](https://github.com/MicrosoftDocs/azure-docs/files/10216795/query_data.1.csv) There's no **Outcome** field in the CommonSecurityLog table as written in the documentation, but there's one field called **EventOutcome** in the sentinel CommonSecurityLog schema.  However, our raw...

[SEC-CommonSecurityLog Schema Outcome Field Mapping Issue-131222-1023.pdf](https://github.com/MicrosoftDocs/azure-docs/files/10216890/SEC-CommonSecurityLog.Schema.Outcome.Field.Mapping.Issue-131222-1023.pdf) Attaching pdf to explain the issue.

Also note, the issue is not a simple documentation error. If the outcome is present in the RAW event it should also appear in the **CommonSecurityLog** table schema under the...