johnuc

How to set Email Injest Parser module for Arcsight

1

Hello, The sample parser modules on the SCOT /opt/scot/lib/Scot/Parser/ does not have for ArcSight. Can i adapt the parser for the splunk.pm. Do i need to make a change on...