jamesfed/Process CEF.txt

Created June 4, 2020 08:22

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/jamesfed/c968dd061caf106d7354a1bc6c29befb.js"></script>
Save jamesfed/c968dd061caf106d7354a1bc6c29befb to your computer and use it in GitHub Desktop.

Download ZIP

Raw

Process CEF.txt

	rule "Process CEF"
	when
	true
	then
	set_fields(parse_cef(to_string($message.message), false));
	end

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment