01-09-2024 01:34 AM
dataset = msft_o365_dlp_raw
How brake the raw log what is shot cut do that i have seen in you tube but im unable find how they doing that
02-16-2024 05:03 AM
Hi @v-jaswanth.g, thanks for reaching us using the live community.
You need to Parse the raw logs from that dataset, I recommend you to start with the last webinar published about Parsing: https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-customer-success-webinar-series-part...
That one will teach you the basics needed to start working with those raw logs.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
