AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
This processor converts logs into Open Cybersecurity Schema Framework (OCSF) events.
For more information about this processor including examples, see parseToOSCF in the CloudWatch Logs User Guide.
Namespace: Amazon.CloudWatchLogs.Model
Assembly: AWSSDK.CloudWatchLogs.dll
Version: 3.x.y.z
public class ParseToOCSF
The ParseToOCSF type exposes the following members
Name | Description | |
---|---|---|
![]() |
ParseToOCSF() |
Name | Type | Description | |
---|---|---|---|
![]() |
EventSource | Amazon.CloudWatchLogs.EventSource |
Gets and sets the property EventSource. Specify the service or process that produces the log events that will be converted with this processor. |
![]() |
OcsfVersion | Amazon.CloudWatchLogs.OCSFVersion |
Gets and sets the property OcsfVersion. Specify which version of the OCSF schema to use for the transformed log events. |
![]() |
Source | System.String |
Gets and sets the property Source. The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed. |
.NET:
Supported in: 8.0 and newer, Core 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.7.2 and newer