Hello everyone, my windows servers are sending DNS debug logs and NPS debug logs from the corresponding files, using NXLog im_file module. When I send the log to Chronicle SIEM, the parser works good but there is one issue.The timezone configured on ...

Hello, I'm having issues with this integration https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-windows-ad . It seems like if NXLog is running, the export file is locked and the script cannot delete/write the file itself. So ...

How do you deal with nested JSON when creating a parser? I see that JSON filter does not support nested JSON.

Hello everyone, we need to add the logs from a software that is still not supported in Chronicle, we will write our own parser. How can we add a new log type? Do we have to contact google?

Does someone know if it's possible to ingest Windows DNS logs without using NXLog paid version? Even with other tools like filebeat, does the default parser work?