<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question ConvertRecord from CEF to JSON, but retain original event as a field called event.original in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/ConvertRecord-from-CEF-to-JSON-but-retain-original-event-as/m-p/391447#M247627</link>
    <description>&lt;P&gt;I want to utilise the ConvertRecord 1.23.2 processor to convert text based CEF into JSON using the CEFReader to JsonRecordSetWriter, but somehow keep the original text CEF log as it appears in its text formate as a field called event.original. Is this at all possible within Nifi?&lt;/P&gt;</description>
    <pubDate>Wed, 07 Aug 2024 10:19:02 GMT</pubDate>
    <dc:creator>robnew</dc:creator>
    <dc:date>2024-08-07T10:19:02Z</dc:date>
    <item>
      <title>ConvertRecord from CEF to JSON, but retain original event as a field called event.original</title>
      <link>https://community.cloudera.com/t5/Support-Questions/ConvertRecord-from-CEF-to-JSON-but-retain-original-event-as/m-p/391447#M247627</link>
      <description>&lt;P&gt;I want to utilise the ConvertRecord 1.23.2 processor to convert text based CEF into JSON using the CEFReader to JsonRecordSetWriter, but somehow keep the original text CEF log as it appears in its text formate as a field called event.original. Is this at all possible within Nifi?&lt;/P&gt;</description>
      <pubDate>Wed, 07 Aug 2024 10:19:02 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/ConvertRecord-from-CEF-to-JSON-but-retain-original-event-as/m-p/391447#M247627</guid>
      <dc:creator>robnew</dc:creator>
      <dc:date>2024-08-07T10:19:02Z</dc:date>
    </item>
    <item>
      <title>Re: ConvertRecord from CEF to JSON, but retain original event as a field called event.original</title>
      <link>https://community.cloudera.com/t5/Support-Questions/ConvertRecord-from-CEF-to-JSON-but-retain-original-event-as/m-p/391448#M247628</link>
      <description>&lt;P&gt;Just figured it out by using the service Raw Message Field &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 07 Aug 2024 10:30:07 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Support-Questions/ConvertRecord-from-CEF-to-JSON-but-retain-original-event-as/m-p/391448#M247628</guid>
      <dc:creator>robnew</dc:creator>
      <dc:date>2024-08-07T10:30:07Z</dc:date>
    </item>
  </channel>
</rss>

