Hi Folks,
We've come across some parsing issues for Trendmicro web proxy logs and while checking with Vendor they've asked us to verify the standard format being used on RSA SIEM in the fields.
I could locate below information from KB (SA: Introduction to Security Analytics )
- The process for ingesting and parsing transactional data is a dynamic and open framework.
It would be really great if someone can shed more light on this.
Best Regards,
Utsav Sejpal
