Normalized logs are supported in the report module.
- Go to Reports > Report Definitions > Datasets, and edit a dataset.
The Normalized log type is available under the SIEM category in the Log Type dropdown.
- Click Test to test the dataset and view the results. Click OK to save the dataset.
Charts including normalized log data can be created using the newly created dataset.
Once created, the chart can be inserted into report layouts.
After the report has been run, you can view normalized log data in the report output.