You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Andre (JIRA)" <ji...@apache.org> on 2016/08/02 05:08:20 UTC

[jira] [Commented] (NIFI-2341) Create a processor to parse logs formated using CEF

    [ https://issues.apache.org/jira/browse/NIFI-2341?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15403359#comment-15403359 ] 

Andre commented on NIFI-2341:
-----------------------------

Created a library to parse and validate CEF logs

https://github.com/fluenda/ParCEFone

Now will use it to create the processor

> Create a processor to parse logs formated using CEF
> ---------------------------------------------------
>
>                 Key: NIFI-2341
>                 URL: https://issues.apache.org/jira/browse/NIFI-2341
>             Project: Apache NiFi
>          Issue Type: Improvement
>            Reporter: Andre
>            Assignee: Andre
>
> As NiFi continue to increase its abilities to complement SIEM, Splunk and ELK deployments, a number of users will be looking to parse CEF formatted logs[1][2].
> CEF is a format specified by Arcsight (now part of HPE) and is described in detail in here:
> https://www.protect724.hpe.com/docs/DOC-1072
> [1] http://apache-nifi.1125220.n5.nabble.com/Suggestion-of-processors-td9795.html
> [2] https://community.hortonworks.com/questions/43185/which-processor-is-used-to-parse-cef-format-logs.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)