AWS, O365 and Sophos Improvements

[Kbayero]

Describe the feature

These integrations have been passed from their respective containers directly to the correlation, with the filtering process occurring in the code. This means they don't appear in data processing, nor can we handle filtering from Logstash.

Use Case

Improvements to filtering

Proposed Solution

To improve this processing, logs from containers must be sent to logstash, which involves creating a pipeline and filter for each one.

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change