Add more support to the SmartConnector for Amazon Web Services S3

[Lasse_Niklasson]

It would be very good and quite easy if Micro Focus add the documentation on how to add you own flex parsers for this connector so one can reuse this S3 Connector for your own logs.

If MF also add the support of CEF files, then this could be the recommended way to bring down CEF logs created by Cloud based Smart/Flex Connectors.

[dalesio]

The AWS S3 connector is a generic connector, meaning it does not require specific parsers.  There is a document available for adding new parsers for AWS S3 hosted events.  I will send this to you.

Also, the support you've requested for CEF is available in our December 2020 release.  I've included an excerpt of our release notes below:

• Additional event sources supported in AWS Security Hub cloud-native SmartConnector, with support for: Proxy, IP and Cloud firewall logs.  All log categories are now fully supported.
• CEF, XML and XQuery log types are now supported by the AWS S3 cloud-native SmartConnector
• Documentation is now available on how to add support for new parsers of events residing in AWS S3
• Ability to delete non-CloudTrail messages

Thanks,

Wayne