Valid XDR-Engineer Dumps shared by ExamDiscuss.com for Helping Passing XDR-Engineer Exam! ExamDiscuss.com now offer the newest XDR-Engineer exam dumps, the ExamDiscuss.com XDR-Engineer exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com XDR-Engineer dumps with Test Engine here:
A security analyst is using Cortex XDR to analyze web server logs from an Apache server and wants to build a parsing rule to structure the incoming JSON-formatted logs, with the intent to extract specific fields. Based on the log image below, which JSON function should be used to extract remote_ip, scanned_ip, and source_log fields?
Correct Answer: C
json_extract_scalar is used to extract scalar values such as strings, numbers, or booleans from JSON-formatted log fields. The remote IP, scanned IP, and source log values are scalar fields, so this function is appropriate for parsing them into structured fields.
