AnsweredAssumed Answered

cef parser handling change to date in payload

Question asked by Renee Russell on Jul 16, 2019

I have a situation where the date value is in the CEF payload and is coming in like this:

timestamp=2019-07-15T18:53:34.313Z

If I assign this value to <ExtensionKey cefName="timestamp" metaName="event_time"/> it errors because of the Z on the end of the string. I can't seem to find a way to strip off the Z off that value before it goes into event_time.

 

Any suggestions on how this might be solved?

Outcomes