SPL2 templates and modules for Microsoft Cloud Services

SPL2 content for Microsoft Cloud Services currently includes two artifact types:

• Templates, which are end-to-end SPL2 pipelines for transforming, reducing, or extracting fields from log data.
• Field-extraction modules, which are reusable SPL2 functions generated from add-on knowledge objects such as props.conf and transforms.conf.

Templates and modules are available for the Edge Processor and Ingest Processor. See the following documentation for more information:

• Edge Processor
• Ingest Processor

Templates

Transform and reduction templates

Template name	Version	Use case	Availability
Azure Monitor AAD Logs: Reduce log size	0.0.1	Reduce the size of Azure Monitor AAD logs by removing unnecessary fields.	Edge Processor and Ingest Processor

See the Release notes for SPL2 template and module release notes.

Modules

For information about available SPL2 modules, see the SPL2 modules overview.