How will Cortex XSIAM help with raw log ingestion from third-party sources in an existing...

Any structured logs coming into it are left completely unchanged, and only metadata is added to the raw data.

For structured logs, like CEF, LEEF, and JSON, it decouples the key-value pairs and saves them in table format.

Any unstructured logs coming into it are left completely unchanged, and metadata is not added to the raw data.

For unstructured logs, it decouples the key-value pairs and saves them in a table format.