I see a lot of answers using the cef-codes plugin to parse CEF output from i.e. ARCsight.
I need the other way around: generate CEF output (from syslog but probably also from other formats) to use as input for ARCsight.
I saw a similar question here unanswered (Need to config codec-cef as output).
Forgive me if this is a dumb question...