[Data Ingestion and Integration]
An administrator wants to employ reusable rules within custom parsing rules to apply consistent log field extraction across multiple data sources. Which section of the parsing rule should the administrator use to define those reusable rules in Cortex XDR?
Currently there are no comments in this discussion, be the first to comment!