CCSE: CrowdStrike Certified SIEM EngineerDemo

By CrowdStrike · Question Mode

QuestionQ32

Parsing and Normalization

Which log-message format below would be parsed by the parseJson() function?

  • A level=debug msg="Disconnected" host=app01
  • B 192.168.1.1 [192.168.1.1] - - [10/May/2024:14:23:11 +0000] "GET/index.html"
  • C { "level": "info", "msg": "User login", "user": "john_doe" }
  • D 2024-05-10T14:23:11Z INFO Service started
Explanation

parseJson() parses valid JSON input. A JSON log record is represented as an object with quoted keys and values, such as the structured record in choice C.

Community Discussion

No comments yet. Be the first to start the discussion!