Laraib Khan

icon indicating an email [email protected]

icon company Securiment icon location Cybersecurity Engineer. Worked on many security solutions in past and currently exploring MS Azure platform.

Results 2 issues of Laraib Khan

CommonSecurityLog Table does not show Outcome Field in Sentinel Workspace

7 comment

CommonSecurityLog Table does not show Outcome Field in Sentinel Workspace --- #### Document Details ⚠ *Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.* *...

triaged
assigned-to-author
Pri2
product-bug
microsoft-sentinel/svc

EventOutcome field and value do not appear in CommonSecurityLog table

5 comment

Microsoft CEF event mapping documentation says the **Outcome** field is mapped in the **CommonSecurityLog** table. ![image](https://user-images.githubusercontent.com/24682607/207341975-51b44084-dcb1-4788-9761-07b1a70d3f84.png) However, there's no **Outcome** field in the **CommonSecurityLog** schema. But there's one field called...

documentation