Show unparsed events in ESM
I have created a Flexconnector, it parsed correctly some events and these are showing in ESM, but I would like see the other events(unparsed events) in ESM. But I need works with the firts regex.
Not sure how you built your FlexConnector...
But if you want to see unparsed events in general create a query that shows events without deviceVendor or deviceProduct. If you only want to see unparsed events from that specific connector, just add the Connector name/Id in the query.
Hope that helps!