Idea ID: 2833758

Convert or consume only specific logs to avro from th-cef

Status : Delivered
8 months ago

As of now whatever goes to th-cef gets converted to avro

If we want to control what has to go to avro , it would be great. So that we have more control what is going to ESM or Investigate/Recon