Please see below the available data transformaer the XPLG contains.
By default XPLG will send Raw Data as is without any additional information. The transformer allow to transform the data structure and add some meta-data (log name, log host, log path, etc.) to be sent with the data.
Type | Description |
---|---|
Fields Schema | Apply field schema according to the log customization. Read More> |
Data Masking | Masking data according to the log parser masking definition. Read More> |
Replace | Replacing existing values, using an expression/regex with new values. Read More> |
CEF Formatter | Data will be sent in a common event format - CEF Format. Read More> |
Raw Data Formatter | Data will be sent in its original structure (also done by default without a transformer in place) but with an option to add only meta data (log name, log host, log path, etc.) Read More> |
CSV Formatter | Data will be sent as a comma-separated values - CSV format. Read More> |
Qradar | Designed for forwarding Windows Events. Read More> |
JSON | Data will be sent in a JSON format. Read More> |
Delimited Formatter | Data will be sent in a delimited format. Set a fields delimiter, key/value delimiter and even add prefix/suffix to every record. Read More> |