Cribl 对Windows-xml log 进行 -flatten-03

The Flatten Function

Description​

The Flatten Function is used to flatten fields out of a nested structure. Let's flatten the _raw JSON object, to further reduce the event's size before we send it to the intended destination(s).

Steps – Adding a Flatten Function​

<