Forum Discussion

skarol1337's avatar
skarol1337
Copper Contributor
Mar 06, 2022

Parse CEF logging and a map field within message

Hi all,   I have successfully configured the oms-agent and the Microsoft CEF python log forward script on a Ubuntu 20.04 x64 VM to forward Fortinet Analyzer logging to Sentinel. I receive the CEF l...
data collection
integration
Log Data
  • skarol1337's avatar
    skarol1337
    Copper Contributor
    Mar 07, 2022

    Thank you Clive_Watson, but ideally I want to place the ad.srccountry variable in the cs1.

     

    Configuring this at the syslog forwarder server side is much cleaner and easier to work with. Would you happen to know how to do this?

    • Clive_Watson's avatar
      Clive_Watson
      Bronze Contributor
      Mar 07, 2022

      skarol1337  Sorry I don't, hence my alternative method, hopefully someone else will know

Resources