we have integrated Sophos with IBM QRadar siem via SIEM API Script and We are receiving logs to IBM Qradar but unable to parse the date due to getting extra line in the log. IBM Qradar does not support Sophos central but we can do customer parsing to parse the data. While we do custom parsing we are getting extra line in the single log from API script so unable to parse data due to this line. please help us how can we remove extra line from the log.
This thread was automatically locked due to age.
