Log Format

key value a simple log format where each piece of information is represented as a key value pair (e g , user=john action=login status=success) this format is easy to parse and widely used for structured logging cef (common event format) a standardized log format developed by arcsight, widely used in security systems it includes a fixed header and a structured message part, allowing interoperability between different security tools example cef 0|vendor|product|version|signature|name|severity|key1=value1 key2=value2 legacy cef an older or customized version of the standard cef format it may not fully comply with the current cef specification and could have variations in structure, field names, or delimiters, making it less consistent and harder to parse reliably