HiI am trying to create a lua parser for custom log event source. I have
below queries w.r.t lua parser.Is it possible to restrict the lua parser
to run against a particular device typeIs it possible to use raw
meta-key as the input for lua parser ag...
Hi There is a requirement to fetch first string present in the met-key
web.page. The web.page meta-key value looks something like below. The
length of the string is variable in nature and the number of strings can
be variable in nature.web.page="/Str...
In Security Analytics 10.5.1, we are facing high memory utilization in
ESA. Even if I disable all the deployed rules, the free memory available
in ESA is around 40% of overall memory.Not sure where the memory is
being utilized.Before disabling the ru...
Thanks Everyone.. Thought of using raw came into my mind due to the
truncated value observed in a parsed meta-key. Is there any way to
address truncation issue. If this can be addressed then i can use the
same meta-key for lua parser.
I have a requirement to carve out few strings from the log. There is a
parser for this event source and it parses my string of interest into a
meta-key, but due to the larger string length, the value is getting
parsed partially. Due to this i am unab...
Hi JoshuaOne clarification needed. In the default list I could see
Source IP Address & Destination IP Address, would like to know the
meta-keys which populate these attributes.As per the files it seems like
ip_address, please let me know your comment...
