PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #2
You are managing a Google Security Operations (SecOps) implementation for a regional customer. Your customer informs you that logs are appearing in the platform after a consistent six-hour delay…
The correct answer is B. Create a parser extension to correct the time zone. The correct fix is to create a parser extension to correct the time zone. Parser extensions let you adjust specific fields, such as timestamps, without modifying the default parser. This resolves ingestion delays caused by time zone mismatches while maintaining the integrity…
Question
You are managing a Google Security Operations (SecOps) implementation for a regional customer. Your customer informs you that logs are appearing in the platform after a consistent six-hour delay. After some research, you determine that there is a log time zone issue. You want to fix this problem. What should you do?
Options
- AModify the default parser and include a default time zone.
- BCreate a parser extension to correct the time zone.
- CCreate a custom parser to correct the time zone.
- DModify the UI settings to correct the time zone.
How the community answered
(25 responses)- A8% (2)
- B84% (21)
- C4% (1)
- D4% (1)
Explanation
The correct fix is to create a parser extension to correct the time zone. Parser extensions let you adjust specific fields, such as timestamps, without modifying the default parser. This resolves ingestion delays caused by time zone mismatches while maintaining the integrity and upgrade compatibility of the default parser.
Topics
Community Discussion
No community discussion yet for this question.