AnsweredAssumed Answered

cef parser handling change to date in payload

Question asked by Renee Russell on Jul 16, 2019

I have a situation where the date value is in the CEF payload and is coming in like this:


If I assign this value to <ExtensionKey cefName="timestamp" metaName="event_time"/> it errors because of the Z on the end of the string. I can't seem to find a way to strip off the Z off that value before it goes into event_time.


Any suggestions on how this might be solved?