Skip to content

ParseToOCSF

Source code in docs_src/capo_cloudwatch_logs/types/parse_to_ocsf.py 
16
17
18
19
20
21
22
23
24
25
26
class ParseToOCSF(TypedDict, closed=True):
    source: NotRequired["capo_cloudwatch_logs.types.source.Source"]
    """<p>The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.</p>"""
    event_source: "capo_cloudwatch_logs.types.event_source.EventSource"
    """<p>Specify the service or process that produces the log events that will be converted with this processor.</p>"""
    ocsf_version: "capo_cloudwatch_logs.types.ocsf_version.OCSFVersion"
    """<p>Specify which version of the OCSF schema to use for the transformed log events.</p>"""
    mapping_version: NotRequired[
        "capo_cloudwatch_logs.types.mapping_version.MappingVersion"
    ]
    """<p>The version of the OCSF mapping to use for parsing log data.</p>"""

event_source instance-attribute 

event_source: EventSource

Specify the service or process that produces the log events that will be converted with this processor.

mapping_version instance-attribute 

mapping_version: NotRequired[MappingVersion]

The version of the OCSF mapping to use for parsing log data.

ocsf_version instance-attribute 

ocsf_version: OCSFVersion

Specify which version of the OCSF schema to use for the transformed log events.

source instance-attribute 

source: NotRequired[Source]

The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.