Skip to main content

A small helper for formatting ArcSight Common Event Format (CEF) compliant messages

Project description


format_cef is a little helper library for producing ArcSight Common Event Format (CEF) compliant messages from structured arguments. You can use it like this:

>>> from format_cef import format_cef
>>> format_cef(
    'acme corp', 'TNT', 1.0, '404 | not found', 'Explosives not found', 10
    oextensions={'deviceAction': 'bang = !'})
'CEF:0|acme corp|TNT|1.0|404 \| not found|Explosives not found|10|act=bang \= !'

Notice how the format format_cef takes care of escaping delimiters correctly. It will also ensure that each CEF extension complies to the restrictions outlined in the CEF documentation.

This module deliberately remains agnostic as to the log message transport protocol (as does CEF itself). It is also designed to remain stateless so as to easy to test and use as a building block in larger systems.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for format-cef, version 0.0.4
Filename, size File type Python version Upload date Hashes
Filename, size format_cef-0.0.4-py2.py3-none-any.whl (9.7 kB) File type Wheel Python version py2.py3 Upload date Hashes View
Filename, size format_cef-0.0.4.tar.gz (7.0 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring DigiCert DigiCert EV certificate Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page