Which event format should the deployment professional choose to be able to use direct parsing support in QRadar’s DSM editor?

A deployment professional is working on integrating an unsupported log source. The log source is able to send events in multiple formats. The administrators of the log source ask which event format should be configured.

Which event format should the deployment professional choose to be able to use direct parsing support in QRadar’s DSM editor?
A . BLOB
B . Regex
C . LEEF
D . SAML

View Answer

Answer: A