Extension Modules

Use extension modules to implement specialized log processing.
  • CSV Parse and output log events as comma-separated values or using a custom delimiter.

  • JSON Parse and output logs in JSON format. The module supports nested objects, JSON array, NDJSON, and pretty-printed JSON.

  • Key-Value Pairs Parse and output log events formatted as key-value pairs.

  • Syslog Parse and output logs in various syslog formats, including BSD, IETF, and Snare.

  • XML Parse and output logs in XML format. The module can automatically parse Windows Event Log XML.