Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Getting extral line from SIEM API Integration logs

Logicalis SOC

we have integrated Sophos with IBM QRadar siem  via SIEM API Script and We are receiving  logs to IBM Qradar but unable to parse the date due to  getting extra line in the log. IBM Qradar does not support Sophos central  but we can do customer parsing to parse the data. While we do custom parsing we are getting extra line in the single log from API script so unable to parse data due to this line. please help us  how can we remove extra line from the log.



This thread was automatically locked due to age.