Page Comparison

macOS X

• box.macos^+info

Check more info about this parser

Docker container logs 

• box.docker.stats

z/OS for IBM mainframes

• box.zos

IBM i

• box.as400.audit.type2^+info

Check more info about this parser

go-audit Linux auditing 

• box.audit.unix.go-audit


Linux kernel firewall - iptables

• box.iptables ^+info

Check more info about this parser

• box.vmware.esx ^+info
• box.vmware.vcenter^+info

Check more info about these parsers

Unix-like System Logs 

• box.unix ^+info

Check more info about this parser

Windows Event Logs

• box.win ^+info

Check more info about this parser

Windows logs via NXlog

• box.win_nxlog.application ^+info
• box.win_nxlog.group_policy ^+info
• box.win_nxlog.invalid ^+info
• box.win_nxlog.other ^+info
• box.win_nxlog.powershell ^+info
• box.win_nxlog.print ^+info
• box.win_nxlog.remote_conn ^+info
• box.win_nxlog.security ^+info
• box.win_nxlog.smb ^+info
• box.win_nxlog.sysmon ^+info
• box.win_nxlog.system ^+info
• box.win_nxlog.windows_powershell^+info

Check more info about these parsers

Windows logs via Snare

• box.win_snare ^+info

Check more info about this parser

Windows log via Quest Intrust

• box.win_intrust ^+info
• box.win_intrust.application ^+info
• box.win_intrust.security ^+info
• box.win_intrust.system ^+info
• box.win_intrust.other ^+info
• box.win_intrust.invalid^+info

Check more info about these parsers