LenelS2 NetBox Parsing Rule

Parsing Rule

LenelS2 NetBox

Details

IDLenelS2_NetBox_ParsingRule
From Version8.4.0

Source

LenelS2NetBox.xif LenelS2NetBox.yml
Download History Raw 
[INGEST:vendor="LanelS2", product="NetBox", target_dataset="lanels2_netbox_raw" , no_hit=keep]
filter to_string(dttm) ~= "\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}(?:\.\d+)?"
| alter _time = parse_timestamp("%F %H:%M:%E*S", to_string(dttm));