Skip to content

Instantly share code, notes, and snippets.

@jamesfed
Created June 4, 2020 08:22
Show Gist options
  • Save jamesfed/c968dd061caf106d7354a1bc6c29befb to your computer and use it in GitHub Desktop.
Save jamesfed/c968dd061caf106d7354a1bc6c29befb to your computer and use it in GitHub Desktop.
rule "Process CEF"
when
true
then
set_fields(parse_cef(to_string($message.message), false));
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment