Learn how to map Okta authentication events stored in Snowflake into the Open Cybersecurity Schema Framework using Query Copilot for Configure Schema.
In this under‑5‑minute demo, Jonathan Rao shows you how to:
- Load a data sample from Snowflake in tabular or JSON view
- Use AI‑driven suggestions to classify event types and map fields (email, IP address, user agent, MFA status, device info, timestamps)
- Review and adjust any mappings before saving
- Deploy your schema in minutes without custom pipelines or code
Runtime: ~5 minutes
Mapping time: typically well under 15 minutes
Documentation & Quickstart Guide: here
