logstash-codec-cef
logstash-codec-cef copied to clipboard
CEF codec for Logstash
While this option was introduced in https://github.com/logstash-plugins/logstash-codec-cef/commit/442d42da8bdf3e7214c9d2a277a6d6fd895bcf35#diff-60997264fb4df8acacfb3987dc3049a5R81, it was never documented
Currently this plugin requires you to list out all CEF fields to be sent, this should be a library of all valid CEF fields and the constraints for each field,...
otherwise throw exception/tag as parse failure see more context in https://github.com/logstash-plugins/logstash-codec-cef/pull/26#pullrequestreview-3551244 cef specification https://www.protect724.hpe.com/servlet/JiveServlet/downloadBody/1072-102-9-20354/CommonEventFormatv23.pdf