[NIFI-2341] Create a processor to parse logs formated using CEF

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Assignee: Andre F de Miranda
• Reporter: Andre F de Miranda
• Created: 21/Jul/16 08:24
• Updated: 21/Oct/16 19:58
• Resolved: 20/Oct/16 21:18

Description

As NiFi continue to increase its abilities to complement SIEM, Splunk and ELK deployments, a number of users will be looking to parse CEF formatted logs[1][2].

CEF is a format specified by Arcsight (now part of HPE) and is described in detail in here:

https://www.protect724.hpe.com/docs/DOC-1072

[1] http://apache-nifi.1125220.n5.nabble.com/Suggestion-of-processors-td9795.html
[2] https://community.hortonworks.com/questions/43185/which-processor-is-used-to-parse-cef-format-logs.html

Issue Links

• links to: GitHub Pull Request #785