JSON Normalizer
StandardJSON Normalizer includes a JSONCompiledNormalizer that can normalize JSON logs while preserving the essential information in the nested structure. JSON Normalizer is designed to handle JSON logs efficiently and effectively when an integration doesn’t have a pre-built normalizer for JSON files. Whether or not to use the JSON Normalizer will depend on your use cases and requirements. One key advantage of using the JSON Normalizer is that it can provide faster performance and memory usage as it compiles the normalization rules into a specialized, optimized format that can be executed quickly and efficiently.
Key Information
- The JSONCompiledNormalizer is generic, so you must put the normalization package at the end of the normalization policy along with other generic packages.
-
JSON Normalizer provides minimal support for key renaming and labeling. For detailed guidance or assistance in customizing the data or sending JSON logs from any device, contact Logpoint Support.
Enhancements
Bug Fix
Past Releases
JSON Normalizer v5.1.1 ▾
Enhancement
JSON Normalizer v5.1.0 ▾
Bug Fixes
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.
You write that Windows is supported, but what kind of Windows event sources does it support? Does it support PowerShell, Sysmon, DNS, etc. that can log to the Windows event log?
Hello Johan,
It supports any type the logs in JSON format with syslog header.