I am newbie with OSSIM and I was wondering if it supports CEF(common event format) events,
We have some devices that sends its logs through syslog/CEF, can OSSIM parse these events?
If not possible, is there a way to process these events? (custom 'plugins' perhaps?)
In the other hand, which is the standard way to integrate new devices with OSSIM? (as I said, I'm new with this SIEM)
Thanks in advance,