ASIM AssetEntity Schema: Three New Fields Added in v1.0.0 Release

What Changed

ASIM AssetEntity schema bumped to version 1.0.0 with three new fields added to the empty parser template:

• EntityKey (Optional, String): unique identifier for entity correlation
• EntityIdType (Mandatory, String): type of entity identifier
• EntitySnapshotId (Optional, String): snapshot identifier for the record

Parser Impact

No change to existing normalised field names or filter logic—safe for existing detections using this parser. The new fields extend correlation capabilities without breaking backward compatibility.

Data fidelity improvement: Queries referencing EntityKey, EntityIdType, or EntitySnapshotId against this parser previously returned null—this adds support for these correlation fields in asset entity queries.

Affected Files

.script/tests/asimParsersTest/VerifyASimParserTemplate.py
ASIM/dev/ASimTester/ASimTester.csv
Parsers/ASimAssetEntity/ARM/vimAssetEntityEmpty/vimAssetEntityEmpty.json
Parsers/ASimAssetEntity/CHANGELOG/vimAssetEntityEmpty.md
Parsers/ASimAssetEntity/Parsers/vimAssetEntityEmpty.yaml