CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ56

VerifiedParsing and Normalization

You have been assigned to parse the following space-delimited log:

2025-06-03 12:13:07 johndoe 192.168.5.15 login

The log-source data is guaranteed to remain in the same order.

Which function can parse this log?

Explanation

parseCsv() parses delimited fields into known columns and supports a configurable delimiter. Using a space delimiter parses the consistently ordered timestamp, username, IP address, and action fields. parseFixedWidth() is intended for fields with defined character widths, not merely a fixed field order.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!