pC_sdtex.md
June 14, 2023 ยท View on GitHub
Parser Content
{
Name = s-dtex
Vendor = Dtex Systems
Product = DTEX InTERCEPT
Lms = Splunk
DataType = "dtex"
IsHVF = true
TimeFormat = "yyyy-MM-dd'T'HH:mm:ss"
Conditions = [ "User_Department", "User_Location"]
Fields = [
"""(?:[^,]{0,2000
}