Log normalization
- Description
-
The process of formatting telemetry data according to the platform taxonomy when forwarding events to a SIEM or log analysis tool. Almost all SIEM solutions have taxonomies for different types of logs. Normalization enables SIEMs to efficiently interpret logs from diverse sources, facilitates event correlation, and makes it easier for you to work with the data in dashboards and reports.
NXLog Agent can translate logs from different sources into a unified taxonomy. It supports mapping event fields to the required schema, enriching log records with additional fields, and converting events into a different data format. Normalization may require log records to include standard metadata fields, such as labels describing the environment where the event originated and keywords to tag the event. Such data might not be part of the original event record but must be added from an external source.
- Also known as
-
normalizing logs, log transformation, normalizing log data, data normalization
- See also