CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ39

VerifiedParsing and Normalization

What time format does the @timestamp field use when data is parsed with the CrowdStrike Parsing Standard (CPS)?

Explanation

In CrowdStrike CPS, @timestamp is a Unix timestamp. Falcon LogScale requires this field to be formatted as Unix time in milliseconds (UTC), rather than as an ISO 8601 or other human-readable string.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!