Log Formats This section contains guides on parsing and producing various log formats. ArcSight CEF Parse and convert logs to CEF. Common Event Expression (CEE) Parse and convert logs to CEE format. Elastic Common Schema (ECS) A guide to normalizing logs to the ECS specification. Log Event Extended Format (LEEF) Parse and convert logs to LEEF. Snare Parsing different types of Snare logs. Syslog A comprehensive guide on parsing and converting logs to BSD and IETF syslog. Zeek Network Security Monitor ArcSight Common Event Format (CEF)