interface ParseToOCSFProperty

Language	Type name
.NET	Amazon.CDK.AWS.Logs.ParseToOCSFProperty
Go	github.com/aws/aws-cdk-go/awscdk/v2/awslogs#ParseToOCSFProperty
Java	software.amazon.awscdk.services.logs.ParseToOCSFProperty
Python	aws_cdk.aws_logs.ParseToOCSFProperty
TypeScript (source)	aws-cdk-lib » aws_logs » ParseToOCSFProperty

Processor to parse events from CloudTrail, Route53Resolver, VPCFlow, EKSAudit and AWSWAF into OCSF V1.1 format.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_logs as logs } from 'aws-cdk-lib';
const parseToOCSFProperty: logs.ParseToOCSFProperty = {
  eventSource: logs.OCSFSourceType.CLOUD_TRAIL,
  ocsfVersion: logs.OCSFVersion.V1_1,

  // the properties below are optional
  source: 'source',
};

Properties

Name	Type	Description
eventSource	OCSFSourceType	Type of input log event source to convert to OCSF format.
ocsfVersion	OCSFVersion	Version of OCSF schema to convert to.
source?	string	Path to the field in the log event that will be parsed.

---

eventSource

Type: OCSFSourceType

Type of input log event source to convert to OCSF format.

---

ocsfVersion

Type: OCSFVersion

Version of OCSF schema to convert to.

---

source?

Type: string (optional, default: '@message')

Path to the field in the log event that will be parsed.

Use dot notation to access child fields.