Hi Chris, Thanks for the suggestion. I understand that we can replace
the event.desc and use some other variable to pass the values captured
in the event.desc meta key. To do so, I need to declare the local
variable as meta to capture the values comi...
Hi Christopher,I have shared the complete Lua parser.This parser only
captures the email from the event.desc meta key.As William mentioned
correctly, I am seeing this issue since declaration variable with a
dot.Is there any way to define the local va...
Hi William, event.desc is currently capturing the string value after a
parsing. The objective here is to capture the email id from the
event.desc to use it for the correlation. I am new to Lua coding so can
you please guide how to changes it. Regards...
Hi Team, I want to extract the email id from event.desc meta key so I
wrote the below lua code. Sample logs -%CASB_log-4: Investigate :
severity=informational^^service=Elastica^^activity_type=Update^^object_type=User^^ldap_memberof=
changed from
["^^...
