[NIFI-8175] Add a WindowsEventLogReader

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.13.0
• Component/s: Extensions
• Assignee: Matt Burgess
• Reporter: Matt Burgess
• Created: 27/Jan/21 03:13
• Updated: 01/Feb/21 21:27
• Resolved: 29/Jan/21 21:22

Description

Although ConsumeWindowsEventLog and ParseEvtx can take Windows Event Logs as input and output XML, the XML format (especially the EventData contents) can be cumbersome to use with XMLRecordReader.

This case proposes a new RecordReader that can specifically take the output from ConsumeWindowsEventLog/ParseEvtx and read it in a more record-friendly format, such as transforming the <Data> tags into "first-class" fields in the output record.

Issue Links

• links to: GitHub Pull Request #4785