zeek ts conversion
venkatesh bandari <[email protected]> Wed, 30 Oct 2019 11:31:39 +0800
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAKPzng_ps2YZzJqUy_2ZGWpJHcRrmcixqmRg8sb9RoqfRa0TJg@mail.gmail.com> |
Hello team, we are doing a zeek poc.iam doing the integration with splunk.in the spunk logs i see the ts value which is not in human readable format.zeek-cut/bro-cut on the box can be used to convert ts to human readable format using -d the question is how can i do this before sending the json logs to splunk.is there a way Thanks Venkatesh _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek