Data modeling rules

Map your Cortex XSIAM logs into a single, unified data model with a consolidated schema.

Data modeling rules enable you to map your logs into a single, unified data model. This data model provides a consolidated schema and a simpler way to interact with your data, regardless of its source or dataset.