cef parser handling change to date in payload
I have a situation where the date value is in the CEF payload and is coming in like this:
If I assign this value to <ExtensionKey cefName="timestamp" metaName="event_time"/> it errors because of the Z on the end of the string. I can't seem to find a way to strip off the Z off that value before it goes into event_time.
Any suggestions on how this might be solved?
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform