CEF parser request

[IstvanJagri]

One of my client wants to parse messages in CEF format, a solution would be neccassary for him. :)
Thanks!
Jagresz

[algernon]

I couldn't find a link to the CEF format spec, all links I could find are dead. Can you point me to where I can read about the format?

I found this, but that's hardly official.

[clicksecurityingest]

I did a Google search on Common Event Format ArcSight and found this PDF

[algernon]

Thanks, will have a look.