I need to edit a parsed meta value and remove an unwanted data from the
parsed data.can some one help me with this. example:- raw log value:-obj
= getval "nijo.d@xxxx.com" meta parsed:- obj.name = getval
"nijo.d@xxxx.com" required value:- obj.name = ...
obj.name= "WO0000000980344ganeshkarthick.s@xxxx.com" how to exclude the
work order "WO0000000980344" and get the email address alone from this
meta. I have a requirement to write a rule with the email address. I am
provided with around 150 email addr...
Hi All, We have integrated an O365 device in our SA. We are receiving
the logs for the same. But for few the logs are not getting parsed and
so the metas are not fully created. how to update an existing parser
meta?? Someone please help me out. I hav...
Hi Eric , This is working. I could see that, after learning period if
some devices that are already integrated and was not reporting starts
reporting to SIEM, it also triggers an alert. Is there any way to stop
that??
