Use the parse_json function in Cortex XDR Parsing Rules.
parse_json()
The parse_json() function processes a JSON string and returns an object whose structure (key and value pairs) is determined by the input parameters.
Last updated 1 month ago
Was this helpful?
