As an upcoming standard in the cybersecurity space, OCSF has gained lots of traction. It is now supported out of the box for many cloud providers, including AWS and Google Cloud.
OCSF defines a standard for DNS activity, and it'd be handy to have entrada output using the OCSF format as an optional feature.
Initially, it seems this would likely require changes to the IcebergTableConfig and DNSRowBuild classes. Perhaps there are other places that the output schema has an effect, but my initial scans didn't turn up much.
I'd be happy to work on this when I have some time if this is something entrada would like to support.
As an upcoming standard in the cybersecurity space, OCSF has gained lots of traction. It is now supported out of the box for many cloud providers, including AWS and Google Cloud.
OCSF defines a standard for DNS activity, and it'd be handy to have entrada output using the OCSF format as an optional feature.
Initially, it seems this would likely require changes to the IcebergTableConfig and DNSRowBuild classes. Perhaps there are other places that the output schema has an effect, but my initial scans didn't turn up much.
I'd be happy to work on this when I have some time if this is something entrada would like to support.