Skip to content

Commit

Permalink
Bump version to 0.2.0
Browse files Browse the repository at this point in the history
  • Loading branch information
bdalpe committed Feb 4, 2022
1 parent 15fe2df commit b81ddcf
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 6 deletions.
13 changes: 8 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Cribl Pack for Common Event Format (CEF)
# Cribl Pack for Common Event Format (CEF) and Log Event Extended Format (LEEF)
----

The Cribl Pack for Common Event Format reshapes your CEF messages into formats that are easily processed by consuming systems. For example, CEF to JSON. Additionally, the pack can process mapping of the custom string and custom number field values and labels into respective fields.
Cribl Pack for Common Event Format and Log Event Extended Format reshapes your CEF and LEEF messages into formats that are easily processed by consuming systems. For example, CEF/LEEF to JSON. Additionally, the pack can process mapping of the custom string and custom number field values and labels into respective fields.

```
The pack turns this:
Expand All @@ -16,13 +16,16 @@ clientIPAddress=103.6.32.100
1. Get the bits.
1. Download the most recent .crbl file from the repo [releases page](https://github.com/criblpacks/cribl-common-event-format/releases).
2. -or- Install in LogStream via the Github URL for this pack: `https://github.com/criblpacks/cribl-common-event-format.git`
2. Create a Route with with a filter for your CEF events.
3. Select the `Common Event Format (CEF)` pack as the pipeline.
4. Configure the pack `cef_processor` pipeline with the desired output format. K=V, JSON, and CEF-like are pre-configured output options. Enable one of these function groups. **Failure to enable an output configuration will result in functionality similar to the "passthru" pipeline.**
2. Create a Route with a filter for your CEF events, or utilize as a pre-processing pipeline on the Syslog Source.
3. Select the `CEF/LEEF Syslog Pack` pack as the pipeline.
4. Configure the pack `cef_processor` and/or `leef_processor` pipeline with the desired output format. K=V, JSON, and CEF-like are pre-configured output options. Enable one of these function groups. **Failure to enable an output configuration will result in functionality similar to the "passthru" pipeline.**


## Release Notes
---
### Version 0.2.0 - 2022-02-04
Add LEEF v1 and v2 processing pipeline

### Version 0.1.0 - 2021-09-17
Initial release

Expand Down
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"name":"cribl-cef-pack","version":"0.1.0","author":"Brendan Dalpe - Cribl","description":"Handles parsing of CEF messages into Key=Value or JSON format.","displayName":"Common Event Format (CEF)"}
{"name":"cribl-cef-pack","version":"0.2.0","author":"Brendan Dalpe - Cribl","description":"Handles parsing of CEF and LEEF messages into Key=Value or JSON format.","displayName":"CEF/LEEF Syslog Pack"}

0 comments on commit b81ddcf

Please sign in to comment.