NXLog Docs

LEEF (Log Event Extended Format)

What is LEEF?


LEEF is a custom log format used by IBM Security QRadar products. It uses key-value pairs to describe an event and consists of predefined event attributes. It also supports additional custom attributes for application-specific information.

In the world of NXLog

LEEF is one of the many log formats that NXLog supports. The dedicated xm_leef extension module can both parse and generate LEEF logs.

Known as

LEEF, Log Event Extended Format, LEEF log, LEEF log format, LEEF format, qradar leef, qradar leef format


LEEF (xm_leef)
Log Event Extended Format (LEEF)

A   B   C   D   E   F   G   H   I   J   K   L   M   N   O   P   R   S   T   U   V   W   X   Z