Hi, I'm using the ParseCEF processor to parse CEF message to Json format. Unfortunately the ParseCEF processor fails for message/events that holds a string in the Msg field that has more than 1023 character. According to the CEF standard the Msg field in an event shall not exceed 1023 character. The PARSECEF fails with:
"Error ParseCEF[id=...] Failed to parse... ...as a CEF message; it does not conform to the CEF standard; routing to failure. Any ideas on a workaround for this problem? I would prefer not having to remove character in the Msg field string. Regards,lj
