Builder

Specify the service or process that produces the log events that will be converted with this processor.

The version of the OCSF mapping to use for parsing log data.

Specify which version of the OCSF schema to use for the transformed log events.

The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.