From 9490b3efd021ef22c892a2fe1bf569a7b2e7ab3b Mon Sep 17 00:00:00 2001 From: Nate Smalley Date: Sun, 26 Apr 2026 22:21:05 -0700 Subject: [PATCH 1/2] pipelines: migrate 91 transform_ocsf entries into push/pull/ structure Moves 91 community pipeline directories from pipelines/community/transform_ocsf// into the ingest-mode-first taxonomy introduced in #59: pipelines/push/syslog/// 57 entries pipelines/pull/api/// 29 entries pipelines/pull/object_store/// 5 entries The mode bucket is determined by each entry's ingest_mode field (backfilled in #61). The vendor and product split is derived per entry from the upstream parser binding and vendor/product convention; collisions across the cluster (Cisco Meraki, Fortinet, Cloudflare, Zscaler, Microsoft, etc.) are disambiguated with explicit product-name overrides documented in .reorg-prep/inventory/transform_ocsf_migration_plan.tsv. History is preserved on every entry (git mv). What stays in pipelines/community/transform_ocsf/ (15 entries): - Generic / template / unknown-vendor entries: agent_metrics_logs, generic_access_logs, inngate_gateway_logs, json_generic_logs, json_nested_kv_logs, leef_template_logs, log4shell_detection_logs, mail_server_logs, microservice_tracing_logs, sample_test_logs, spam_detection_logs, sql_database_logs, syslog_space_delimited_logs, vpc_logs, jruby_application_logs. What is NOT in this PR (intentional): - 23 entries scheduled for removal in #62 (broken-legacy, 7) and #63 (first-party ingestion paths, 16) are NOT moved; they remain in transform_ocsf/ until those PRs merge. This PR has no overlap or conflict with #62/#63 -- merge order does not matter. - No serializer logic, no metadata.yaml content, and no pipeline JSON content was modified. Every change is a directory rename. - No naming-consistency cleanup (e.g., paloalto_* -> palo_alto/*) is applied yet; that is a separate follow-up. The pipelines/push/{syslog,hec}/ and pipelines/pull/{api,object_store}/ directories are now populated -- the empty scaffolding from #59 finally has content. Co-Authored-By: Claude Opus 4.7 (1M context) --- .../api/axonius/assets}/axonius_asset_logs.json | 0 .../axonius_asset_logs => pull/api/axonius/assets}/metadata.yaml | 0 .../axonius_asset_logs => pull/api/axonius/assets}/sample.json | 0 .../axonius_asset_logs => pull/api/axonius/assets}/serializer.lua | 0 .../api/cloudflare/general}/cloudflare_general_logs.json | 0 .../api/cloudflare/general}/metadata.yaml | 0 .../api/cloudflare/general}/sample.json | 0 .../api/cloudflare/general}/serializer.lua | 0 .../api/cloudflare/logs}/cloudflare_logs.json | 0 .../cloudflare_logs => pull/api/cloudflare/logs}/metadata.yaml | 0 .../cloudflare_logs => pull/api/cloudflare/logs}/sample.json | 0 .../cloudflare_logs => pull/api/cloudflare/logs}/serializer.lua | 0 .../api/cloudflare/waf}/cloudflare_waf_logs.json | 0 .../cloudflare_waf_logs => pull/api/cloudflare/waf}/metadata.yaml | 0 .../cloudflare_waf_logs => pull/api/cloudflare/waf}/sample.json | 0 .../api/cloudflare/waf}/serializer.lua | 0 .../api/cloudflare/waf_alt}/cloudflare_inc_waf_lastest.json | 0 .../api/cloudflare/waf_alt}/metadata.yaml | 0 .../api/cloudflare/waf_alt}/sample.json | 0 .../api/cloudflare/waf_alt}/serializer.lua | 0 .../api/confluent/kafka}/confluent_kafka_logs.json | 0 .../api/confluent/kafka}/metadata.yaml | 0 .../api/confluent/kafka}/serializer.lua | 0 .../api/crowdstrike/detections}/crowdstrike_detections.json | 0 .../api/crowdstrike/detections}/metadata.yaml | 0 .../api/crowdstrike/detections}/sample.json | 0 .../api/crowdstrike/detections}/serializer.lua | 0 .../api/crowdstrike/logs}/crowdstrike_logs.json | 0 .../crowdstrike_logs => pull/api/crowdstrike/logs}/metadata.yaml | 0 .../crowdstrike_logs => pull/api/crowdstrike/logs}/sample.json | 0 .../crowdstrike_logs => pull/api/crowdstrike/logs}/serializer.lua | 0 .../api/github/audit}/github_audit_logs.json | 0 .../github_audit_logs => pull/api/github/audit}/metadata.yaml | 0 .../github_audit_logs => pull/api/github/audit}/sample.json | 0 .../github_audit_logs => pull/api/github/audit}/serializer.lua | 0 .../api/google/cloud_dns}/google_cloud_dns_logs.json | 0 .../api/google/cloud_dns}/metadata.yaml | 0 .../api/google/cloud_dns}/sample.json | 0 .../api/google/cloud_dns}/serializer.lua | 0 .../api/google}/gcp_vpc_flow/gcp_vpc_flow.json | 0 .../transform_ocsf => pull/api/google}/gcp_vpc_flow/metadata.yaml | 0 .../transform_ocsf => pull/api/google}/gcp_vpc_flow/sample.json | 0 .../api/google}/gcp_vpc_flow/serializer.lua | 0 .../api/google/workspace}/google_workspace_logs.json | 0 .../api/google/workspace}/metadata.yaml | 0 .../api/google/workspace}/sample.json | 0 .../api/google/workspace}/serializer.lua | 0 .../api/hashicorp/hcp_vault}/hashicorp_hcp_vault_logs.json | 0 .../api/hashicorp/hcp_vault}/metadata.yaml | 0 .../api/hashicorp/hcp_vault}/sample.json | 0 .../api/hashicorp/hcp_vault}/serializer.lua | 0 .../api/imperva/incapsula}/incapsula_incapsula_logs.json | 0 .../api/imperva/incapsula}/metadata.yaml | 0 .../api/imperva/incapsula}/sample.json | 0 .../api/imperva/incapsula}/serializer.lua | 0 .../azure_logs => pull/api/microsoft/azure}/azure_logs.json | 0 .../azure_logs => pull/api/microsoft/azure}/metadata.yaml | 0 .../azure_logs => pull/api/microsoft/azure}/serializer.lua | 0 .../api/microsoft/m365_audit}/m365_audit_logs.json | 0 .../api/microsoft/m365_audit}/metadata.yaml | 0 .../m365_audit_logs => pull/api/microsoft/m365_audit}/sample.json | 0 .../api/microsoft/m365_audit}/serializer.lua | 0 .../api/microsoft/m365_mgmt_api}/metadata.yaml | 0 .../api/microsoft/m365_mgmt_api}/microsoft_365_mgmt_api_logs.json | 0 .../api/microsoft/m365_mgmt_api}/sample.json | 0 .../api/microsoft/m365_mgmt_api}/serializer.lua | 0 .../api/mimecast/mimecast}/metadata.yaml | 0 .../api/mimecast/mimecast}/mimecast_mimecast_logs.json | 0 .../api/mimecast/mimecast}/sample.json | 0 .../api/mimecast/mimecast}/serializer.lua | 0 .../transform_ocsf/okta_logs => pull/api/okta/logs}/metadata.yaml | 0 .../okta_logs => pull/api/okta/logs}/okta_logs.json | 0 .../transform_ocsf/okta_logs => pull/api/okta/logs}/sample.json | 0 .../okta_logs => pull/api/okta/logs}/serializer.lua | 0 .../okta_ocsf_logs => pull/api/okta/ocsf}/metadata.yaml | 0 .../okta_ocsf_logs => pull/api/okta/ocsf}/okta_ocsf_logs.json | 0 .../okta_ocsf_logs => pull/api/okta/ocsf}/sample.json | 0 .../okta_ocsf_logs => pull/api/okta/ocsf}/serializer.lua | 0 .../rubrik_backup_logs => pull/api/rubrik/backup}/metadata.yaml | 0 .../api/rubrik/backup}/rubrik_backup_logs.json | 0 .../rubrik_backup_logs => pull/api/rubrik/backup}/serializer.lua | 0 .../api/sentinelone/singularity_identity}/metadata.yaml | 0 .../api/sentinelone/singularity_identity}/sample.json | 0 .../api/sentinelone/singularity_identity}/serializer.lua | 0 .../singularityidentity_singularityidentity_logs.json | 0 .../api/tailscale/tailscale}/metadata.yaml | 0 .../api/tailscale/tailscale}/sample.json | 0 .../api/tailscale/tailscale}/serializer.lua | 0 .../api/tailscale/tailscale}/tailscale_tailscale_logs.json | 0 .../teleport_logs => pull/api/teleport/audit}/metadata.yaml | 0 .../teleport_logs => pull/api/teleport/audit}/sample.json | 0 .../teleport_logs => pull/api/teleport/audit}/serializer.lua | 0 .../teleport_logs => pull/api/teleport/audit}/teleport_logs.json | 0 .../vectra_ai_logs => pull/api/vectra/ai}/metadata.yaml | 0 .../vectra_ai_logs => pull/api/vectra/ai}/sample.json | 0 .../vectra_ai_logs => pull/api/vectra/ai}/serializer.lua | 0 .../vectra_ai_logs => pull/api/vectra/ai}/vectra_ai_logs.json | 0 .../api/zscaler/dns_firewall}/metadata.yaml | 0 .../api/zscaler/dns_firewall}/sample.json | 0 .../api/zscaler/dns_firewall}/serializer.lua | 0 .../api/zscaler/dns_firewall}/zscaler_dns_firewall.json | 0 .../api/zscaler/firewall}/metadata.yaml | 0 .../api/zscaler/firewall}/sample.json | 0 .../api/zscaler/firewall}/serializer.lua | 0 .../api/zscaler/firewall}/zscaler_firewall_logs.json | 0 .../zscaler_logs => pull/api/zscaler/logs}/metadata.yaml | 0 .../zscaler_logs => pull/api/zscaler/logs}/serializer.lua | 0 .../zscaler_logs => pull/api/zscaler/logs}/zscaler_logs.json | 0 .../zscaler_zia_logs => pull/api/zscaler/zia}/metadata.yaml | 0 .../zscaler_zia_logs => pull/api/zscaler/zia}/serializer.lua | 0 .../api/zscaler/zia}/zscaler_zia_logs.json | 0 .../object_store/aws/elb}/aws_elasticloadbalancer_logs.json | 0 .../object_store/aws/elb}/metadata.yaml | 0 .../object_store/aws/elb}/sample.json | 0 .../object_store/aws/elb}/serializer.lua | 0 .../object_store/aws/vpc_dns}/aws_vpc_dns_logs.json | 0 .../object_store/aws/vpc_dns}/metadata.yaml | 0 .../object_store/aws/vpc_dns}/sample.json | 0 .../object_store/aws/vpc_dns}/serializer.lua | 0 .../object_store/aws/vpc_flow}/aws_vpc_flow.json | 0 .../aws_vpc_flow => pull/object_store/aws/vpc_flow}/metadata.yaml | 0 .../aws_vpc_flow => pull/object_store/aws/vpc_flow}/sample.json | 0 .../object_store/aws/vpc_flow}/serializer.lua | 0 .../object_store/cisco/umbrella}/cisco_umbrella_logs.json | 0 .../object_store/cisco/umbrella}/metadata.yaml | 0 .../object_store/cisco/umbrella}/sample.json | 0 .../object_store/cisco/umbrella}/serializer.lua | 0 .../microsoft/azure_nsg_flow}/azure_nsg_flow_logs.json | 0 .../object_store/microsoft/azure_nsg_flow}/metadata.yaml | 0 .../object_store/microsoft/azure_nsg_flow}/sample.json | 0 .../object_store/microsoft/azure_nsg_flow}/serializer.lua | 0 .../akamai_cdn => push/syslog/akamai/cdn}/akamai_cdn.json | 0 .../akamai_cdn => push/syslog/akamai/cdn}/metadata.yaml | 0 .../akamai_cdn => push/syslog/akamai/cdn}/sample.json | 0 .../akamai_cdn => push/syslog/akamai/cdn}/serializer.lua | 0 .../akamai_dns => push/syslog/akamai/dns}/akamai_dns.json | 0 .../akamai_dns => push/syslog/akamai/dns}/metadata.yaml | 0 .../akamai_dns => push/syslog/akamai/dns}/sample.json | 0 .../akamai_dns => push/syslog/akamai/dns}/serializer.lua | 0 .../syslog/akamai/general}/akamai_general.json | 0 .../akamai_general => push/syslog/akamai/general}/metadata.yaml | 0 .../akamai_general => push/syslog/akamai/general}/sample.json | 0 .../akamai_general => push/syslog/akamai/general}/serializer.lua | 0 .../syslog/akamai/sitedefender}/akamai_sitedefender.json | 0 .../syslog/akamai/sitedefender}/metadata.yaml | 0 .../syslog/akamai/sitedefender}/sample.json | 0 .../syslog/akamai/sitedefender}/serializer.lua | 0 .../syslog/apache/http}/apache_http_logs.json | 0 .../apache_http_logs => push/syslog/apache/http}/metadata.yaml | 0 .../apache_http_logs => push/syslog/apache/http}/sample.json | 0 .../apache_http_logs => push/syslog/apache/http}/serializer.lua | 0 .../barracuda/firewall}/barracuda_firewall_logs_latest.json | 0 .../syslog/barracuda/firewall}/metadata.yaml | 0 .../syslog/barracuda/firewall}/serializer.lua | 0 .../beyondtrust/passwordsafe}/beyondtrust_passwordsafe_logs.json | 0 .../syslog/beyondtrust/passwordsafe}/metadata.yaml | 0 .../syslog/beyondtrust/passwordsafe}/sample.json | 0 .../syslog/beyondtrust/passwordsafe}/serializer.lua | 0 .../cisco_asa_logs => push/syslog/cisco/asa}/cisco_asa_logs.json | 0 .../cisco_asa_logs => push/syslog/cisco/asa}/metadata.yaml | 0 .../cisco_asa_logs => push/syslog/cisco/asa}/sample.json | 0 .../cisco_asa_logs => push/syslog/cisco/asa}/serializer.lua | 0 .../syslog/cisco/combo}/cisco_combo_logs.json | 0 .../cisco_combo_logs => push/syslog/cisco/combo}/metadata.yaml | 0 .../cisco_combo_logs => push/syslog/cisco/combo}/sample.json | 0 .../cisco_combo_logs => push/syslog/cisco/combo}/serializer.lua | 0 .../syslog/cisco/firewall}/cisco_firewall.json | 0 .../cisco_firewall => push/syslog/cisco/firewall}/metadata.yaml | 0 .../cisco_firewall => push/syslog/cisco/firewall}/sample.json | 0 .../cisco_firewall => push/syslog/cisco/firewall}/serializer.lua | 0 .../cisco_fmc_logs => push/syslog/cisco/fmc}/cisco_fmc_logs.json | 0 .../cisco_fmc_logs => push/syslog/cisco/fmc}/metadata.yaml | 0 .../cisco_fmc_logs => push/syslog/cisco/fmc}/sample.json | 0 .../cisco_fmc_logs => push/syslog/cisco/fmc}/serializer.lua | 0 .../cisco_ios_logs => push/syslog/cisco/ios}/cisco_ios_logs.json | 0 .../cisco_ios_logs => push/syslog/cisco/ios}/metadata.yaml | 0 .../cisco_ios_logs => push/syslog/cisco/ios}/sample.json | 0 .../cisco_ios_logs => push/syslog/cisco/ios}/serializer.lua | 0 .../syslog/cisco/ironport}/cisco_ironport.json | 0 .../cisco_ironport => push/syslog/cisco/ironport}/metadata.yaml | 0 .../cisco_ironport => push/syslog/cisco/ironport}/sample.json | 0 .../cisco_ironport => push/syslog/cisco/ironport}/serializer.lua | 0 .../syslog/cisco/isa3000}/cisco_isa3000_logs.json | 0 .../syslog/cisco/isa3000}/metadata.yaml | 0 .../cisco_isa3000_logs => push/syslog/cisco/isa3000}/sample.json | 0 .../syslog/cisco/isa3000}/serializer.lua | 0 .../cisco_ise_logs => push/syslog/cisco/ise}/cisco_ise_logs.json | 0 .../cisco_ise_logs => push/syslog/cisco/ise}/metadata.yaml | 0 .../cisco_ise_logs => push/syslog/cisco/ise}/sample.json | 0 .../cisco_ise_logs => push/syslog/cisco/ise}/serializer.lua | 0 .../cisco_logs => push/syslog/cisco/logs}/cisco_logs.json | 0 .../cisco_logs => push/syslog/cisco/logs}/metadata.yaml | 0 .../cisco_logs => push/syslog/cisco/logs}/sample.json | 0 .../cisco_logs => push/syslog/cisco/logs}/serializer.lua | 0 .../cisco_meraki => push/syslog/cisco/meraki}/cisco_meraki.json | 0 .../cisco_meraki => push/syslog/cisco/meraki}/metadata.yaml | 0 .../cisco_meraki => push/syslog/cisco/meraki}/sample.json | 0 .../cisco_meraki => push/syslog/cisco/meraki}/serializer.lua | 0 .../syslog/cisco/meraki_flow}/cisco_meraki_flow_logs.json | 0 .../syslog/cisco/meraki_flow}/metadata.yaml | 0 .../syslog/cisco/meraki_flow}/sample.json | 0 .../syslog/cisco/meraki_flow}/serializer.lua | 0 .../syslog/cisco/meraki_v2}/cisco_meraki_logs.json | 0 .../syslog/cisco/meraki_v2}/metadata.yaml | 0 .../cisco_meraki_logs => push/syslog/cisco/meraki_v2}/sample.json | 0 .../syslog/cisco/meraki_v2}/serializer.lua | 0 .../meraki_logs => push/syslog/cisco/meraki_v3}/meraki_logs.json | 0 .../meraki_logs => push/syslog/cisco/meraki_v3}/metadata.yaml | 0 .../meraki_logs => push/syslog/cisco/meraki_v3}/sample.json | 0 .../meraki_logs => push/syslog/cisco/meraki_v3}/serializer.lua | 0 .../syslog/cisco/networks}/cisco_networks_logs.json | 0 .../syslog/cisco/networks}/metadata.yaml | 0 .../syslog/cisco/networks}/sample.json | 0 .../syslog/cisco/networks}/serializer.lua | 0 .../syslog/citrix/netscaler}/citrix_netscaler_logs.json | 0 .../syslog/citrix/netscaler}/metadata.yaml | 0 .../syslog/citrix/netscaler}/sample.json | 0 .../syslog/citrix/netscaler}/serializer.lua | 0 .../syslog/crowdstrike/endpoint}/crowdstrike_endpoint.json | 0 .../syslog/crowdstrike/endpoint}/metadata.yaml | 0 .../syslog/crowdstrike/endpoint}/sample.json | 0 .../syslog/crowdstrike/endpoint}/serializer.lua | 0 .../syslog/cyberark/conjur}/cyberark_conjur.json | 0 .../cyberark_conjur => push/syslog/cyberark/conjur}/metadata.yaml | 0 .../cyberark_conjur => push/syslog/cyberark/conjur}/sample.json | 0 .../syslog/cyberark/conjur}/serializer.lua | 0 .../syslog/f5/networks}/f5_networks_logs.json | 0 .../f5_networks_logs => push/syslog/f5/networks}/metadata.yaml | 0 .../f5_networks_logs => push/syslog/f5/networks}/sample.json | 0 .../f5_networks_logs => push/syslog/f5/networks}/serializer.lua | 0 .../syslog/forcepoint/forcepoint}/forcepoint_forcepoint_logs.json | 0 .../syslog/forcepoint/forcepoint}/metadata.yaml | 0 .../syslog/forcepoint/forcepoint}/sample.json | 0 .../syslog/forcepoint/forcepoint}/serializer.lua | 0 .../syslog/fortinet/fortigate}/fortinet_fortigate.json | 0 .../syslog/fortinet/fortigate}/metadata.yaml | 0 .../syslog/fortinet/fortigate}/sample.json | 0 .../syslog/fortinet/fortigate}/serializer.lua | 0 .../fortigate_candidate}/fortinet_fortigate_candidate_logs.json | 0 .../syslog/fortinet/fortigate_candidate}/metadata.yaml | 0 .../syslog/fortinet/fortigate_candidate}/sample.json | 0 .../syslog/fortinet/fortigate_candidate}/serializer.lua | 0 .../syslog/fortinet/fortigate_v2}/fortigate_logs.json | 0 .../syslog/fortinet/fortigate_v2}/metadata.yaml | 0 .../syslog/fortinet/fortigate_v2}/sample.json | 0 .../syslog/fortinet/fortigate_v2}/serializer.lua | 0 .../syslog/fortinet/fortimanager}/fortimanager_logs.json | 0 .../syslog/fortinet/fortimanager}/metadata.yaml | 0 .../syslog/fortinet/fortimanager}/sample.json | 0 .../syslog/fortinet/fortimanager}/serializer.lua | 0 .../syslog/fortinet/logs}/fortinet_logs.json | 0 .../fortinet_logs => push/syslog/fortinet/logs}/metadata.yaml | 0 .../fortinet_logs => push/syslog/fortinet/logs}/sample.json | 0 .../fortinet_logs => push/syslog/fortinet/logs}/serializer.lua | 0 .../syslog/haproxy/loadbalancer}/haproxy_loadbalancer_logs.json | 0 .../syslog/haproxy/loadbalancer}/metadata.yaml | 0 .../syslog/haproxy/loadbalancer}/sample.json | 0 .../syslog/haproxy/loadbalancer}/serializer.lua | 0 .../syslog/imperva/waf}/imperva_waf_logs.json | 0 .../imperva_waf_logs => push/syslog/imperva/waf}/metadata.yaml | 0 .../imperva_waf_logs => push/syslog/imperva/waf}/sample.json | 0 .../imperva_waf_logs => push/syslog/imperva/waf}/serializer.lua | 0 .../syslog/infoblox/logs}/infoblox_logs.json | 0 .../infoblox_logs => push/syslog/infoblox/logs}/metadata.yaml | 0 .../infoblox_logs => push/syslog/infoblox/logs}/sample.json | 0 .../infoblox_logs => push/syslog/infoblox/logs}/serializer.lua | 0 .../juniper_logs => push/syslog/juniper/logs}/juniper_logs.json | 0 .../juniper_logs => push/syslog/juniper/logs}/metadata.yaml | 0 .../juniper_logs => push/syslog/juniper/logs}/sample.json | 0 .../juniper_logs => push/syslog/juniper/logs}/serializer.lua | 0 .../linux_auth => push/syslog/linux/auth}/linux_auth.json | 0 .../linux_auth => push/syslog/linux/auth}/metadata.yaml | 0 .../linux_auth => push/syslog/linux/auth}/sample.json | 0 .../linux_auth => push/syslog/linux/auth}/serializer.lua | 0 .../dhcp_logs => push/syslog/linux/dhcp}/dhcp_logs.json | 0 .../dhcp_logs => push/syslog/linux/dhcp}/metadata.yaml | 0 .../dhcp_logs => push/syslog/linux/dhcp}/sample.json | 0 .../dhcp_logs => push/syslog/linux/dhcp}/serializer.lua | 0 .../syslog/linux/dns_general}/dns_general_logs.json | 0 .../syslog/linux/dns_general}/metadata.yaml | 0 .../syslog/linux/dns_general}/sample.json | 0 .../syslog/linux/dns_general}/serializer.lua | 0 .../syslog/linux/dns_ocsf}/dns_ocsf_logs.json | 0 .../dns_ocsf_logs => push/syslog/linux/dns_ocsf}/metadata.yaml | 0 .../dns_ocsf_logs => push/syslog/linux/dns_ocsf}/sample.json | 0 .../dns_ocsf_logs => push/syslog/linux/dns_ocsf}/serializer.lua | 0 .../ufw_firewall_logs => push/syslog/linux/ufw}/metadata.yaml | 0 .../ufw_firewall_logs => push/syslog/linux/ufw}/serializer.lua | 0 .../syslog/linux/ufw}/ufw_firewall_logs.json | 0 .../ad_audit_plus_alt}/managedengine_ad_audit_plus.json | 0 .../syslog/manageengine/ad_audit_plus_alt}/metadata.yaml | 0 .../syslog/manageengine/ad_audit_plus_alt}/sample.json | 0 .../syslog/manageengine/ad_audit_plus_alt}/serializer.lua | 0 .../manageengine/adauditplus}/manageengine_adauditplus_logs.json | 0 .../syslog/manageengine/adauditplus}/metadata.yaml | 0 .../syslog/manageengine/adauditplus}/sample.json | 0 .../syslog/manageengine/adauditplus}/serializer.lua | 0 .../syslog/manageengine/logs}/manageengine_general_logs.json | 0 .../syslog/manageengine/logs}/metadata.yaml | 0 .../syslog/manageengine/logs}/sample.json | 0 .../syslog/manageengine/logs}/serializer.lua | 0 .../syslog/microsoft/active_directory}/metadata.yaml | 0 .../active_directory}/microsoft_activedirectory_logs.json | 0 .../syslog/microsoft/active_directory}/sample.json | 0 .../syslog/microsoft/active_directory}/serializer.lua | 0 .../iis_w3c => push/syslog/microsoft/iis}/iis_w3c.json | 0 .../iis_w3c => push/syslog/microsoft/iis}/metadata.yaml | 0 .../iis_w3c => push/syslog/microsoft/iis}/sample.json | 0 .../iis_w3c => push/syslog/microsoft/iis}/serializer.lua | 0 .../syslog/microsoft/windows_event}/metadata.yaml | 0 .../syslog/microsoft/windows_event}/sample.json | 0 .../syslog/microsoft/windows_event}/serializer.lua | 0 .../syslog/microsoft/windows_event}/windows_event_log_logs.json | 0 .../nginx_kvlog_logs => push/syslog/nginx/access}/metadata.yaml | 0 .../syslog/nginx/access}/nginx_kvlog_logs.json | 0 .../nginx_kvlog_logs => push/syslog/nginx/access}/serializer.lua | 0 .../nginx_error_logs => push/syslog/nginx/error}/metadata.yaml | 0 .../syslog/nginx/error}/nginx_error_logs.json | 0 .../nginx_error_logs => push/syslog/nginx/error}/serializer.lua | 0 .../syslog/palo_alto/globalprotect}/metadata.yaml | 0 .../syslog/palo_alto/globalprotect}/paloalto_vpn_logs.json | 0 .../syslog/palo_alto/globalprotect}/sample.json | 0 .../syslog/palo_alto/globalprotect}/serializer.lua | 0 .../paloalto_logs => push/syslog/palo_alto/panos}/metadata.yaml | 0 .../syslog/palo_alto/panos}/paloalto_logs.json | 0 .../paloalto_logs => push/syslog/palo_alto/panos}/sample.json | 0 .../paloalto_logs => push/syslog/palo_alto/panos}/serializer.lua | 0 .../syslog/palo_alto/panos_alt}/metadata.yaml | 0 .../syslog/palo_alto/panos_alt}/paloalto_alternate_logs.json | 0 .../syslog/palo_alto/panos_alt}/sample.json | 0 .../syslog/palo_alto/panos_alt}/serializer.lua | 0 .../syslog/pfsense/firewall}/metadata.yaml | 0 .../syslog/pfsense/firewall}/pfsense_firewall_logs.json | 0 .../syslog/pfsense/firewall}/sample.json | 0 .../syslog/pfsense/firewall}/serializer.lua | 0 .../syslog/sonicwall/firewall}/metadata.yaml | 0 .../syslog/sonicwall/firewall}/sample.json | 0 .../syslog/sonicwall/firewall}/serializer.lua | 0 .../syslog/sonicwall/firewall}/sonicwall_firewall_logs.json | 0 .../squid_proxy_logs => push/syslog/squid/proxy}/metadata.yaml | 0 .../squid_proxy_logs => push/syslog/squid/proxy}/serializer.lua | 0 .../syslog/squid/proxy}/squid_proxy_logs.json | 0 .../vcenter_logs => push/syslog/vmware/vcenter}/metadata.yaml | 0 .../vcenter_logs => push/syslog/vmware/vcenter}/sample.json | 0 .../vcenter_logs => push/syslog/vmware/vcenter}/serializer.lua | 0 .../vcenter_logs => push/syslog/vmware/vcenter}/vcenter_logs.json | 0 .../syslog/vmware/vcenter_v2}/metadata.yaml | 0 .../syslog/vmware/vcenter_v2}/sample.json | 0 .../syslog/vmware/vcenter_v2}/serializer.lua | 0 .../syslog/vmware/vcenter_v2}/vmware_vcenter_logs.json | 0 .../syslog/watchguard/firewall}/metadata.yaml | 0 .../syslog/watchguard/firewall}/sample.json | 0 .../syslog/watchguard/firewall}/serializer.lua | 0 .../syslog/watchguard/firewall}/watchguard_firewall_logs.json | 0 354 files changed, 0 insertions(+), 0 deletions(-) rename pipelines/{community/transform_ocsf/axonius_asset_logs => pull/api/axonius/assets}/axonius_asset_logs.json (100%) rename pipelines/{community/transform_ocsf/axonius_asset_logs => pull/api/axonius/assets}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/axonius_asset_logs => pull/api/axonius/assets}/sample.json (100%) rename pipelines/{community/transform_ocsf/axonius_asset_logs => pull/api/axonius/assets}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cloudflare_general_logs => pull/api/cloudflare/general}/cloudflare_general_logs.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_general_logs => pull/api/cloudflare/general}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cloudflare_general_logs => pull/api/cloudflare/general}/sample.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_general_logs => pull/api/cloudflare/general}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cloudflare_logs => pull/api/cloudflare/logs}/cloudflare_logs.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_logs => pull/api/cloudflare/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cloudflare_logs => pull/api/cloudflare/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_logs => pull/api/cloudflare/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cloudflare_waf_logs => pull/api/cloudflare/waf}/cloudflare_waf_logs.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_waf_logs => pull/api/cloudflare/waf}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cloudflare_waf_logs => pull/api/cloudflare/waf}/sample.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_waf_logs => pull/api/cloudflare/waf}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cloudflare_inc_waf_lastest => pull/api/cloudflare/waf_alt}/cloudflare_inc_waf_lastest.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_inc_waf_lastest => pull/api/cloudflare/waf_alt}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cloudflare_inc_waf_lastest => pull/api/cloudflare/waf_alt}/sample.json (100%) rename pipelines/{community/transform_ocsf/cloudflare_inc_waf_lastest => pull/api/cloudflare/waf_alt}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/confluent_kafka_logs => pull/api/confluent/kafka}/confluent_kafka_logs.json (100%) rename pipelines/{community/transform_ocsf/confluent_kafka_logs => pull/api/confluent/kafka}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/confluent_kafka_logs => pull/api/confluent/kafka}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/crowdstrike_detections => pull/api/crowdstrike/detections}/crowdstrike_detections.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_detections => pull/api/crowdstrike/detections}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/crowdstrike_detections => pull/api/crowdstrike/detections}/sample.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_detections => pull/api/crowdstrike/detections}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/crowdstrike_logs => pull/api/crowdstrike/logs}/crowdstrike_logs.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_logs => pull/api/crowdstrike/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/crowdstrike_logs => pull/api/crowdstrike/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_logs => pull/api/crowdstrike/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/github_audit_logs => pull/api/github/audit}/github_audit_logs.json (100%) rename pipelines/{community/transform_ocsf/github_audit_logs => pull/api/github/audit}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/github_audit_logs => pull/api/github/audit}/sample.json (100%) rename pipelines/{community/transform_ocsf/github_audit_logs => pull/api/github/audit}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/google_cloud_dns_logs => pull/api/google/cloud_dns}/google_cloud_dns_logs.json (100%) rename pipelines/{community/transform_ocsf/google_cloud_dns_logs => pull/api/google/cloud_dns}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/google_cloud_dns_logs => pull/api/google/cloud_dns}/sample.json (100%) rename pipelines/{community/transform_ocsf/google_cloud_dns_logs => pull/api/google/cloud_dns}/serializer.lua (100%) rename pipelines/{community/transform_ocsf => pull/api/google}/gcp_vpc_flow/gcp_vpc_flow.json (100%) rename pipelines/{community/transform_ocsf => pull/api/google}/gcp_vpc_flow/metadata.yaml (100%) rename pipelines/{community/transform_ocsf => pull/api/google}/gcp_vpc_flow/sample.json (100%) rename pipelines/{community/transform_ocsf => pull/api/google}/gcp_vpc_flow/serializer.lua (100%) rename pipelines/{community/transform_ocsf/google_workspace_logs => pull/api/google/workspace}/google_workspace_logs.json (100%) rename pipelines/{community/transform_ocsf/google_workspace_logs => pull/api/google/workspace}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/google_workspace_logs => pull/api/google/workspace}/sample.json (100%) rename pipelines/{community/transform_ocsf/google_workspace_logs => pull/api/google/workspace}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/hashicorp_hcp_vault_logs => pull/api/hashicorp/hcp_vault}/hashicorp_hcp_vault_logs.json (100%) rename pipelines/{community/transform_ocsf/hashicorp_hcp_vault_logs => pull/api/hashicorp/hcp_vault}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/hashicorp_hcp_vault_logs => pull/api/hashicorp/hcp_vault}/sample.json (100%) rename pipelines/{community/transform_ocsf/hashicorp_hcp_vault_logs => pull/api/hashicorp/hcp_vault}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/incapsula_incapsula_logs => pull/api/imperva/incapsula}/incapsula_incapsula_logs.json (100%) rename pipelines/{community/transform_ocsf/incapsula_incapsula_logs => pull/api/imperva/incapsula}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/incapsula_incapsula_logs => pull/api/imperva/incapsula}/sample.json (100%) rename pipelines/{community/transform_ocsf/incapsula_incapsula_logs => pull/api/imperva/incapsula}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/azure_logs => pull/api/microsoft/azure}/azure_logs.json (100%) rename pipelines/{community/transform_ocsf/azure_logs => pull/api/microsoft/azure}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/azure_logs => pull/api/microsoft/azure}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/m365_audit_logs => pull/api/microsoft/m365_audit}/m365_audit_logs.json (100%) rename pipelines/{community/transform_ocsf/m365_audit_logs => pull/api/microsoft/m365_audit}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/m365_audit_logs => pull/api/microsoft/m365_audit}/sample.json (100%) rename pipelines/{community/transform_ocsf/m365_audit_logs => pull/api/microsoft/m365_audit}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/microsoft_365_mgmt_api_logs => pull/api/microsoft/m365_mgmt_api}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/microsoft_365_mgmt_api_logs => pull/api/microsoft/m365_mgmt_api}/microsoft_365_mgmt_api_logs.json (100%) rename pipelines/{community/transform_ocsf/microsoft_365_mgmt_api_logs => pull/api/microsoft/m365_mgmt_api}/sample.json (100%) rename pipelines/{community/transform_ocsf/microsoft_365_mgmt_api_logs => pull/api/microsoft/m365_mgmt_api}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/mimecast_mimecast_logs => pull/api/mimecast/mimecast}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/mimecast_mimecast_logs => pull/api/mimecast/mimecast}/mimecast_mimecast_logs.json (100%) rename pipelines/{community/transform_ocsf/mimecast_mimecast_logs => pull/api/mimecast/mimecast}/sample.json (100%) rename pipelines/{community/transform_ocsf/mimecast_mimecast_logs => pull/api/mimecast/mimecast}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/okta_logs => pull/api/okta/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/okta_logs => pull/api/okta/logs}/okta_logs.json (100%) rename pipelines/{community/transform_ocsf/okta_logs => pull/api/okta/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/okta_logs => pull/api/okta/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/okta_ocsf_logs => pull/api/okta/ocsf}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/okta_ocsf_logs => pull/api/okta/ocsf}/okta_ocsf_logs.json (100%) rename pipelines/{community/transform_ocsf/okta_ocsf_logs => pull/api/okta/ocsf}/sample.json (100%) rename pipelines/{community/transform_ocsf/okta_ocsf_logs => pull/api/okta/ocsf}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/rubrik_backup_logs => pull/api/rubrik/backup}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/rubrik_backup_logs => pull/api/rubrik/backup}/rubrik_backup_logs.json (100%) rename pipelines/{community/transform_ocsf/rubrik_backup_logs => pull/api/rubrik/backup}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/singularityidentity_singularityidentity_logs => pull/api/sentinelone/singularity_identity}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/singularityidentity_singularityidentity_logs => pull/api/sentinelone/singularity_identity}/sample.json (100%) rename pipelines/{community/transform_ocsf/singularityidentity_singularityidentity_logs => pull/api/sentinelone/singularity_identity}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/singularityidentity_singularityidentity_logs => pull/api/sentinelone/singularity_identity}/singularityidentity_singularityidentity_logs.json (100%) rename pipelines/{community/transform_ocsf/tailscale_tailscale_logs => pull/api/tailscale/tailscale}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/tailscale_tailscale_logs => pull/api/tailscale/tailscale}/sample.json (100%) rename pipelines/{community/transform_ocsf/tailscale_tailscale_logs => pull/api/tailscale/tailscale}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/tailscale_tailscale_logs => pull/api/tailscale/tailscale}/tailscale_tailscale_logs.json (100%) rename pipelines/{community/transform_ocsf/teleport_logs => pull/api/teleport/audit}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/teleport_logs => pull/api/teleport/audit}/sample.json (100%) rename pipelines/{community/transform_ocsf/teleport_logs => pull/api/teleport/audit}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/teleport_logs => pull/api/teleport/audit}/teleport_logs.json (100%) rename pipelines/{community/transform_ocsf/vectra_ai_logs => pull/api/vectra/ai}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/vectra_ai_logs => pull/api/vectra/ai}/sample.json (100%) rename pipelines/{community/transform_ocsf/vectra_ai_logs => pull/api/vectra/ai}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/vectra_ai_logs => pull/api/vectra/ai}/vectra_ai_logs.json (100%) rename pipelines/{community/transform_ocsf/zscaler_dns_firewall => pull/api/zscaler/dns_firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/zscaler_dns_firewall => pull/api/zscaler/dns_firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/zscaler_dns_firewall => pull/api/zscaler/dns_firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/zscaler_dns_firewall => pull/api/zscaler/dns_firewall}/zscaler_dns_firewall.json (100%) rename pipelines/{community/transform_ocsf/zscaler_firewall_logs => pull/api/zscaler/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/zscaler_firewall_logs => pull/api/zscaler/firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/zscaler_firewall_logs => pull/api/zscaler/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/zscaler_firewall_logs => pull/api/zscaler/firewall}/zscaler_firewall_logs.json (100%) rename pipelines/{community/transform_ocsf/zscaler_logs => pull/api/zscaler/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/zscaler_logs => pull/api/zscaler/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/zscaler_logs => pull/api/zscaler/logs}/zscaler_logs.json (100%) rename pipelines/{community/transform_ocsf/zscaler_zia_logs => pull/api/zscaler/zia}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/zscaler_zia_logs => pull/api/zscaler/zia}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/zscaler_zia_logs => pull/api/zscaler/zia}/zscaler_zia_logs.json (100%) rename pipelines/{community/transform_ocsf/aws_elasticloadbalancer_logs => pull/object_store/aws/elb}/aws_elasticloadbalancer_logs.json (100%) rename pipelines/{community/transform_ocsf/aws_elasticloadbalancer_logs => pull/object_store/aws/elb}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/aws_elasticloadbalancer_logs => pull/object_store/aws/elb}/sample.json (100%) rename pipelines/{community/transform_ocsf/aws_elasticloadbalancer_logs => pull/object_store/aws/elb}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/aws_vpc_dns_logs => pull/object_store/aws/vpc_dns}/aws_vpc_dns_logs.json (100%) rename pipelines/{community/transform_ocsf/aws_vpc_dns_logs => pull/object_store/aws/vpc_dns}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/aws_vpc_dns_logs => pull/object_store/aws/vpc_dns}/sample.json (100%) rename pipelines/{community/transform_ocsf/aws_vpc_dns_logs => pull/object_store/aws/vpc_dns}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/aws_vpc_flow => pull/object_store/aws/vpc_flow}/aws_vpc_flow.json (100%) rename pipelines/{community/transform_ocsf/aws_vpc_flow => pull/object_store/aws/vpc_flow}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/aws_vpc_flow => pull/object_store/aws/vpc_flow}/sample.json (100%) rename pipelines/{community/transform_ocsf/aws_vpc_flow => pull/object_store/aws/vpc_flow}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_umbrella_logs => pull/object_store/cisco/umbrella}/cisco_umbrella_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_umbrella_logs => pull/object_store/cisco/umbrella}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_umbrella_logs => pull/object_store/cisco/umbrella}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_umbrella_logs => pull/object_store/cisco/umbrella}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/azure_nsg_flow_logs => pull/object_store/microsoft/azure_nsg_flow}/azure_nsg_flow_logs.json (100%) rename pipelines/{community/transform_ocsf/azure_nsg_flow_logs => pull/object_store/microsoft/azure_nsg_flow}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/azure_nsg_flow_logs => pull/object_store/microsoft/azure_nsg_flow}/sample.json (100%) rename pipelines/{community/transform_ocsf/azure_nsg_flow_logs => pull/object_store/microsoft/azure_nsg_flow}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/akamai_cdn => push/syslog/akamai/cdn}/akamai_cdn.json (100%) rename pipelines/{community/transform_ocsf/akamai_cdn => push/syslog/akamai/cdn}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/akamai_cdn => push/syslog/akamai/cdn}/sample.json (100%) rename pipelines/{community/transform_ocsf/akamai_cdn => push/syslog/akamai/cdn}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/akamai_dns => push/syslog/akamai/dns}/akamai_dns.json (100%) rename pipelines/{community/transform_ocsf/akamai_dns => push/syslog/akamai/dns}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/akamai_dns => push/syslog/akamai/dns}/sample.json (100%) rename pipelines/{community/transform_ocsf/akamai_dns => push/syslog/akamai/dns}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/akamai_general => push/syslog/akamai/general}/akamai_general.json (100%) rename pipelines/{community/transform_ocsf/akamai_general => push/syslog/akamai/general}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/akamai_general => push/syslog/akamai/general}/sample.json (100%) rename pipelines/{community/transform_ocsf/akamai_general => push/syslog/akamai/general}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/akamai_sitedefender => push/syslog/akamai/sitedefender}/akamai_sitedefender.json (100%) rename pipelines/{community/transform_ocsf/akamai_sitedefender => push/syslog/akamai/sitedefender}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/akamai_sitedefender => push/syslog/akamai/sitedefender}/sample.json (100%) rename pipelines/{community/transform_ocsf/akamai_sitedefender => push/syslog/akamai/sitedefender}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/apache_http_logs => push/syslog/apache/http}/apache_http_logs.json (100%) rename pipelines/{community/transform_ocsf/apache_http_logs => push/syslog/apache/http}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/apache_http_logs => push/syslog/apache/http}/sample.json (100%) rename pipelines/{community/transform_ocsf/apache_http_logs => push/syslog/apache/http}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/barracuda_firewall_logs_latest => push/syslog/barracuda/firewall}/barracuda_firewall_logs_latest.json (100%) rename pipelines/{community/transform_ocsf/barracuda_firewall_logs_latest => push/syslog/barracuda/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/barracuda_firewall_logs_latest => push/syslog/barracuda/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/beyondtrust_passwordsafe_logs => push/syslog/beyondtrust/passwordsafe}/beyondtrust_passwordsafe_logs.json (100%) rename pipelines/{community/transform_ocsf/beyondtrust_passwordsafe_logs => push/syslog/beyondtrust/passwordsafe}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/beyondtrust_passwordsafe_logs => push/syslog/beyondtrust/passwordsafe}/sample.json (100%) rename pipelines/{community/transform_ocsf/beyondtrust_passwordsafe_logs => push/syslog/beyondtrust/passwordsafe}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_asa_logs => push/syslog/cisco/asa}/cisco_asa_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_asa_logs => push/syslog/cisco/asa}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_asa_logs => push/syslog/cisco/asa}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_asa_logs => push/syslog/cisco/asa}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_combo_logs => push/syslog/cisco/combo}/cisco_combo_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_combo_logs => push/syslog/cisco/combo}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_combo_logs => push/syslog/cisco/combo}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_combo_logs => push/syslog/cisco/combo}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_firewall => push/syslog/cisco/firewall}/cisco_firewall.json (100%) rename pipelines/{community/transform_ocsf/cisco_firewall => push/syslog/cisco/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_firewall => push/syslog/cisco/firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_firewall => push/syslog/cisco/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_fmc_logs => push/syslog/cisco/fmc}/cisco_fmc_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_fmc_logs => push/syslog/cisco/fmc}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_fmc_logs => push/syslog/cisco/fmc}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_fmc_logs => push/syslog/cisco/fmc}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_ios_logs => push/syslog/cisco/ios}/cisco_ios_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_ios_logs => push/syslog/cisco/ios}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_ios_logs => push/syslog/cisco/ios}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_ios_logs => push/syslog/cisco/ios}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_ironport => push/syslog/cisco/ironport}/cisco_ironport.json (100%) rename pipelines/{community/transform_ocsf/cisco_ironport => push/syslog/cisco/ironport}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_ironport => push/syslog/cisco/ironport}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_ironport => push/syslog/cisco/ironport}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_isa3000_logs => push/syslog/cisco/isa3000}/cisco_isa3000_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_isa3000_logs => push/syslog/cisco/isa3000}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_isa3000_logs => push/syslog/cisco/isa3000}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_isa3000_logs => push/syslog/cisco/isa3000}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_ise_logs => push/syslog/cisco/ise}/cisco_ise_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_ise_logs => push/syslog/cisco/ise}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_ise_logs => push/syslog/cisco/ise}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_ise_logs => push/syslog/cisco/ise}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_logs => push/syslog/cisco/logs}/cisco_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_logs => push/syslog/cisco/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_logs => push/syslog/cisco/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_logs => push/syslog/cisco/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_meraki => push/syslog/cisco/meraki}/cisco_meraki.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki => push/syslog/cisco/meraki}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_meraki => push/syslog/cisco/meraki}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki => push/syslog/cisco/meraki}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_flow_logs => push/syslog/cisco/meraki_flow}/cisco_meraki_flow_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_flow_logs => push/syslog/cisco/meraki_flow}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_flow_logs => push/syslog/cisco/meraki_flow}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_flow_logs => push/syslog/cisco/meraki_flow}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_logs => push/syslog/cisco/meraki_v2}/cisco_meraki_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_logs => push/syslog/cisco/meraki_v2}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_logs => push/syslog/cisco/meraki_v2}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_meraki_logs => push/syslog/cisco/meraki_v2}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/meraki_logs => push/syslog/cisco/meraki_v3}/meraki_logs.json (100%) rename pipelines/{community/transform_ocsf/meraki_logs => push/syslog/cisco/meraki_v3}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/meraki_logs => push/syslog/cisco/meraki_v3}/sample.json (100%) rename pipelines/{community/transform_ocsf/meraki_logs => push/syslog/cisco/meraki_v3}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cisco_networks_logs => push/syslog/cisco/networks}/cisco_networks_logs.json (100%) rename pipelines/{community/transform_ocsf/cisco_networks_logs => push/syslog/cisco/networks}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cisco_networks_logs => push/syslog/cisco/networks}/sample.json (100%) rename pipelines/{community/transform_ocsf/cisco_networks_logs => push/syslog/cisco/networks}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/citrix_netscaler_logs => push/syslog/citrix/netscaler}/citrix_netscaler_logs.json (100%) rename pipelines/{community/transform_ocsf/citrix_netscaler_logs => push/syslog/citrix/netscaler}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/citrix_netscaler_logs => push/syslog/citrix/netscaler}/sample.json (100%) rename pipelines/{community/transform_ocsf/citrix_netscaler_logs => push/syslog/citrix/netscaler}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/crowdstrike_endpoint => push/syslog/crowdstrike/endpoint}/crowdstrike_endpoint.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_endpoint => push/syslog/crowdstrike/endpoint}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/crowdstrike_endpoint => push/syslog/crowdstrike/endpoint}/sample.json (100%) rename pipelines/{community/transform_ocsf/crowdstrike_endpoint => push/syslog/crowdstrike/endpoint}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/cyberark_conjur => push/syslog/cyberark/conjur}/cyberark_conjur.json (100%) rename pipelines/{community/transform_ocsf/cyberark_conjur => push/syslog/cyberark/conjur}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/cyberark_conjur => push/syslog/cyberark/conjur}/sample.json (100%) rename pipelines/{community/transform_ocsf/cyberark_conjur => push/syslog/cyberark/conjur}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/f5_networks_logs => push/syslog/f5/networks}/f5_networks_logs.json (100%) rename pipelines/{community/transform_ocsf/f5_networks_logs => push/syslog/f5/networks}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/f5_networks_logs => push/syslog/f5/networks}/sample.json (100%) rename pipelines/{community/transform_ocsf/f5_networks_logs => push/syslog/f5/networks}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/forcepoint_forcepoint_logs => push/syslog/forcepoint/forcepoint}/forcepoint_forcepoint_logs.json (100%) rename pipelines/{community/transform_ocsf/forcepoint_forcepoint_logs => push/syslog/forcepoint/forcepoint}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/forcepoint_forcepoint_logs => push/syslog/forcepoint/forcepoint}/sample.json (100%) rename pipelines/{community/transform_ocsf/forcepoint_forcepoint_logs => push/syslog/forcepoint/forcepoint}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate => push/syslog/fortinet/fortigate}/fortinet_fortigate.json (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate => push/syslog/fortinet/fortigate}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate => push/syslog/fortinet/fortigate}/sample.json (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate => push/syslog/fortinet/fortigate}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate_candidate_logs => push/syslog/fortinet/fortigate_candidate}/fortinet_fortigate_candidate_logs.json (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate_candidate_logs => push/syslog/fortinet/fortigate_candidate}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate_candidate_logs => push/syslog/fortinet/fortigate_candidate}/sample.json (100%) rename pipelines/{community/transform_ocsf/fortinet_fortigate_candidate_logs => push/syslog/fortinet/fortigate_candidate}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/fortigate_logs => push/syslog/fortinet/fortigate_v2}/fortigate_logs.json (100%) rename pipelines/{community/transform_ocsf/fortigate_logs => push/syslog/fortinet/fortigate_v2}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/fortigate_logs => push/syslog/fortinet/fortigate_v2}/sample.json (100%) rename pipelines/{community/transform_ocsf/fortigate_logs => push/syslog/fortinet/fortigate_v2}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/fortimanager_logs => push/syslog/fortinet/fortimanager}/fortimanager_logs.json (100%) rename pipelines/{community/transform_ocsf/fortimanager_logs => push/syslog/fortinet/fortimanager}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/fortimanager_logs => push/syslog/fortinet/fortimanager}/sample.json (100%) rename pipelines/{community/transform_ocsf/fortimanager_logs => push/syslog/fortinet/fortimanager}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/fortinet_logs => push/syslog/fortinet/logs}/fortinet_logs.json (100%) rename pipelines/{community/transform_ocsf/fortinet_logs => push/syslog/fortinet/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/fortinet_logs => push/syslog/fortinet/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/fortinet_logs => push/syslog/fortinet/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/haproxy_loadbalancer_logs => push/syslog/haproxy/loadbalancer}/haproxy_loadbalancer_logs.json (100%) rename pipelines/{community/transform_ocsf/haproxy_loadbalancer_logs => push/syslog/haproxy/loadbalancer}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/haproxy_loadbalancer_logs => push/syslog/haproxy/loadbalancer}/sample.json (100%) rename pipelines/{community/transform_ocsf/haproxy_loadbalancer_logs => push/syslog/haproxy/loadbalancer}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/imperva_waf_logs => push/syslog/imperva/waf}/imperva_waf_logs.json (100%) rename pipelines/{community/transform_ocsf/imperva_waf_logs => push/syslog/imperva/waf}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/imperva_waf_logs => push/syslog/imperva/waf}/sample.json (100%) rename pipelines/{community/transform_ocsf/imperva_waf_logs => push/syslog/imperva/waf}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/infoblox_logs => push/syslog/infoblox/logs}/infoblox_logs.json (100%) rename pipelines/{community/transform_ocsf/infoblox_logs => push/syslog/infoblox/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/infoblox_logs => push/syslog/infoblox/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/infoblox_logs => push/syslog/infoblox/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/juniper_logs => push/syslog/juniper/logs}/juniper_logs.json (100%) rename pipelines/{community/transform_ocsf/juniper_logs => push/syslog/juniper/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/juniper_logs => push/syslog/juniper/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/juniper_logs => push/syslog/juniper/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/linux_auth => push/syslog/linux/auth}/linux_auth.json (100%) rename pipelines/{community/transform_ocsf/linux_auth => push/syslog/linux/auth}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/linux_auth => push/syslog/linux/auth}/sample.json (100%) rename pipelines/{community/transform_ocsf/linux_auth => push/syslog/linux/auth}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/dhcp_logs => push/syslog/linux/dhcp}/dhcp_logs.json (100%) rename pipelines/{community/transform_ocsf/dhcp_logs => push/syslog/linux/dhcp}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/dhcp_logs => push/syslog/linux/dhcp}/sample.json (100%) rename pipelines/{community/transform_ocsf/dhcp_logs => push/syslog/linux/dhcp}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/dns_general_logs => push/syslog/linux/dns_general}/dns_general_logs.json (100%) rename pipelines/{community/transform_ocsf/dns_general_logs => push/syslog/linux/dns_general}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/dns_general_logs => push/syslog/linux/dns_general}/sample.json (100%) rename pipelines/{community/transform_ocsf/dns_general_logs => push/syslog/linux/dns_general}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/dns_ocsf_logs => push/syslog/linux/dns_ocsf}/dns_ocsf_logs.json (100%) rename pipelines/{community/transform_ocsf/dns_ocsf_logs => push/syslog/linux/dns_ocsf}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/dns_ocsf_logs => push/syslog/linux/dns_ocsf}/sample.json (100%) rename pipelines/{community/transform_ocsf/dns_ocsf_logs => push/syslog/linux/dns_ocsf}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/ufw_firewall_logs => push/syslog/linux/ufw}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/ufw_firewall_logs => push/syslog/linux/ufw}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/ufw_firewall_logs => push/syslog/linux/ufw}/ufw_firewall_logs.json (100%) rename pipelines/{community/transform_ocsf/managedengine_ad_audit_plus => push/syslog/manageengine/ad_audit_plus_alt}/managedengine_ad_audit_plus.json (100%) rename pipelines/{community/transform_ocsf/managedengine_ad_audit_plus => push/syslog/manageengine/ad_audit_plus_alt}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/managedengine_ad_audit_plus => push/syslog/manageengine/ad_audit_plus_alt}/sample.json (100%) rename pipelines/{community/transform_ocsf/managedengine_ad_audit_plus => push/syslog/manageengine/ad_audit_plus_alt}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/manageengine_adauditplus_logs => push/syslog/manageengine/adauditplus}/manageengine_adauditplus_logs.json (100%) rename pipelines/{community/transform_ocsf/manageengine_adauditplus_logs => push/syslog/manageengine/adauditplus}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/manageengine_adauditplus_logs => push/syslog/manageengine/adauditplus}/sample.json (100%) rename pipelines/{community/transform_ocsf/manageengine_adauditplus_logs => push/syslog/manageengine/adauditplus}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/manageengine_general_logs => push/syslog/manageengine/logs}/manageengine_general_logs.json (100%) rename pipelines/{community/transform_ocsf/manageengine_general_logs => push/syslog/manageengine/logs}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/manageengine_general_logs => push/syslog/manageengine/logs}/sample.json (100%) rename pipelines/{community/transform_ocsf/manageengine_general_logs => push/syslog/manageengine/logs}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/microsoft_activedirectory_logs => push/syslog/microsoft/active_directory}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/microsoft_activedirectory_logs => push/syslog/microsoft/active_directory}/microsoft_activedirectory_logs.json (100%) rename pipelines/{community/transform_ocsf/microsoft_activedirectory_logs => push/syslog/microsoft/active_directory}/sample.json (100%) rename pipelines/{community/transform_ocsf/microsoft_activedirectory_logs => push/syslog/microsoft/active_directory}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/iis_w3c => push/syslog/microsoft/iis}/iis_w3c.json (100%) rename pipelines/{community/transform_ocsf/iis_w3c => push/syslog/microsoft/iis}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/iis_w3c => push/syslog/microsoft/iis}/sample.json (100%) rename pipelines/{community/transform_ocsf/iis_w3c => push/syslog/microsoft/iis}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/windows_event_log_logs => push/syslog/microsoft/windows_event}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/windows_event_log_logs => push/syslog/microsoft/windows_event}/sample.json (100%) rename pipelines/{community/transform_ocsf/windows_event_log_logs => push/syslog/microsoft/windows_event}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/windows_event_log_logs => push/syslog/microsoft/windows_event}/windows_event_log_logs.json (100%) rename pipelines/{community/transform_ocsf/nginx_kvlog_logs => push/syslog/nginx/access}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/nginx_kvlog_logs => push/syslog/nginx/access}/nginx_kvlog_logs.json (100%) rename pipelines/{community/transform_ocsf/nginx_kvlog_logs => push/syslog/nginx/access}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/nginx_error_logs => push/syslog/nginx/error}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/nginx_error_logs => push/syslog/nginx/error}/nginx_error_logs.json (100%) rename pipelines/{community/transform_ocsf/nginx_error_logs => push/syslog/nginx/error}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/paloalto_vpn_logs => push/syslog/palo_alto/globalprotect}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/paloalto_vpn_logs => push/syslog/palo_alto/globalprotect}/paloalto_vpn_logs.json (100%) rename pipelines/{community/transform_ocsf/paloalto_vpn_logs => push/syslog/palo_alto/globalprotect}/sample.json (100%) rename pipelines/{community/transform_ocsf/paloalto_vpn_logs => push/syslog/palo_alto/globalprotect}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/paloalto_logs => push/syslog/palo_alto/panos}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/paloalto_logs => push/syslog/palo_alto/panos}/paloalto_logs.json (100%) rename pipelines/{community/transform_ocsf/paloalto_logs => push/syslog/palo_alto/panos}/sample.json (100%) rename pipelines/{community/transform_ocsf/paloalto_logs => push/syslog/palo_alto/panos}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/paloalto_alternate_logs => push/syslog/palo_alto/panos_alt}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/paloalto_alternate_logs => push/syslog/palo_alto/panos_alt}/paloalto_alternate_logs.json (100%) rename pipelines/{community/transform_ocsf/paloalto_alternate_logs => push/syslog/palo_alto/panos_alt}/sample.json (100%) rename pipelines/{community/transform_ocsf/paloalto_alternate_logs => push/syslog/palo_alto/panos_alt}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/pfsense_firewall_logs => push/syslog/pfsense/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/pfsense_firewall_logs => push/syslog/pfsense/firewall}/pfsense_firewall_logs.json (100%) rename pipelines/{community/transform_ocsf/pfsense_firewall_logs => push/syslog/pfsense/firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/pfsense_firewall_logs => push/syslog/pfsense/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/sonicwall_firewall_logs => push/syslog/sonicwall/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/sonicwall_firewall_logs => push/syslog/sonicwall/firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/sonicwall_firewall_logs => push/syslog/sonicwall/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/sonicwall_firewall_logs => push/syslog/sonicwall/firewall}/sonicwall_firewall_logs.json (100%) rename pipelines/{community/transform_ocsf/squid_proxy_logs => push/syslog/squid/proxy}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/squid_proxy_logs => push/syslog/squid/proxy}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/squid_proxy_logs => push/syslog/squid/proxy}/squid_proxy_logs.json (100%) rename pipelines/{community/transform_ocsf/vcenter_logs => push/syslog/vmware/vcenter}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/vcenter_logs => push/syslog/vmware/vcenter}/sample.json (100%) rename pipelines/{community/transform_ocsf/vcenter_logs => push/syslog/vmware/vcenter}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/vcenter_logs => push/syslog/vmware/vcenter}/vcenter_logs.json (100%) rename pipelines/{community/transform_ocsf/vmware_vcenter_logs => push/syslog/vmware/vcenter_v2}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/vmware_vcenter_logs => push/syslog/vmware/vcenter_v2}/sample.json (100%) rename pipelines/{community/transform_ocsf/vmware_vcenter_logs => push/syslog/vmware/vcenter_v2}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/vmware_vcenter_logs => push/syslog/vmware/vcenter_v2}/vmware_vcenter_logs.json (100%) rename pipelines/{community/transform_ocsf/watchguard_firewall_logs => push/syslog/watchguard/firewall}/metadata.yaml (100%) rename pipelines/{community/transform_ocsf/watchguard_firewall_logs => push/syslog/watchguard/firewall}/sample.json (100%) rename pipelines/{community/transform_ocsf/watchguard_firewall_logs => push/syslog/watchguard/firewall}/serializer.lua (100%) rename pipelines/{community/transform_ocsf/watchguard_firewall_logs => push/syslog/watchguard/firewall}/watchguard_firewall_logs.json (100%) diff --git a/pipelines/community/transform_ocsf/axonius_asset_logs/axonius_asset_logs.json b/pipelines/pull/api/axonius/assets/axonius_asset_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/axonius_asset_logs/axonius_asset_logs.json rename to pipelines/pull/api/axonius/assets/axonius_asset_logs.json diff --git a/pipelines/community/transform_ocsf/axonius_asset_logs/metadata.yaml b/pipelines/pull/api/axonius/assets/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/axonius_asset_logs/metadata.yaml rename to pipelines/pull/api/axonius/assets/metadata.yaml diff --git a/pipelines/community/transform_ocsf/axonius_asset_logs/sample.json b/pipelines/pull/api/axonius/assets/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/axonius_asset_logs/sample.json rename to pipelines/pull/api/axonius/assets/sample.json diff --git a/pipelines/community/transform_ocsf/axonius_asset_logs/serializer.lua b/pipelines/pull/api/axonius/assets/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/axonius_asset_logs/serializer.lua rename to pipelines/pull/api/axonius/assets/serializer.lua diff --git a/pipelines/community/transform_ocsf/cloudflare_general_logs/cloudflare_general_logs.json b/pipelines/pull/api/cloudflare/general/cloudflare_general_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_general_logs/cloudflare_general_logs.json rename to pipelines/pull/api/cloudflare/general/cloudflare_general_logs.json diff --git a/pipelines/community/transform_ocsf/cloudflare_general_logs/metadata.yaml b/pipelines/pull/api/cloudflare/general/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_general_logs/metadata.yaml rename to pipelines/pull/api/cloudflare/general/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cloudflare_general_logs/sample.json b/pipelines/pull/api/cloudflare/general/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_general_logs/sample.json rename to pipelines/pull/api/cloudflare/general/sample.json diff --git a/pipelines/community/transform_ocsf/cloudflare_general_logs/serializer.lua b/pipelines/pull/api/cloudflare/general/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_general_logs/serializer.lua rename to pipelines/pull/api/cloudflare/general/serializer.lua diff --git a/pipelines/community/transform_ocsf/cloudflare_logs/cloudflare_logs.json b/pipelines/pull/api/cloudflare/logs/cloudflare_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_logs/cloudflare_logs.json rename to pipelines/pull/api/cloudflare/logs/cloudflare_logs.json diff --git a/pipelines/community/transform_ocsf/cloudflare_logs/metadata.yaml b/pipelines/pull/api/cloudflare/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_logs/metadata.yaml rename to pipelines/pull/api/cloudflare/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cloudflare_logs/sample.json b/pipelines/pull/api/cloudflare/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_logs/sample.json rename to pipelines/pull/api/cloudflare/logs/sample.json diff --git a/pipelines/community/transform_ocsf/cloudflare_logs/serializer.lua b/pipelines/pull/api/cloudflare/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_logs/serializer.lua rename to pipelines/pull/api/cloudflare/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/cloudflare_waf_logs/cloudflare_waf_logs.json b/pipelines/pull/api/cloudflare/waf/cloudflare_waf_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_waf_logs/cloudflare_waf_logs.json rename to pipelines/pull/api/cloudflare/waf/cloudflare_waf_logs.json diff --git a/pipelines/community/transform_ocsf/cloudflare_waf_logs/metadata.yaml b/pipelines/pull/api/cloudflare/waf/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_waf_logs/metadata.yaml rename to pipelines/pull/api/cloudflare/waf/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cloudflare_waf_logs/sample.json b/pipelines/pull/api/cloudflare/waf/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_waf_logs/sample.json rename to pipelines/pull/api/cloudflare/waf/sample.json diff --git a/pipelines/community/transform_ocsf/cloudflare_waf_logs/serializer.lua b/pipelines/pull/api/cloudflare/waf/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_waf_logs/serializer.lua rename to pipelines/pull/api/cloudflare/waf/serializer.lua diff --git a/pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/cloudflare_inc_waf_lastest.json b/pipelines/pull/api/cloudflare/waf_alt/cloudflare_inc_waf_lastest.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/cloudflare_inc_waf_lastest.json rename to pipelines/pull/api/cloudflare/waf_alt/cloudflare_inc_waf_lastest.json diff --git a/pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/metadata.yaml b/pipelines/pull/api/cloudflare/waf_alt/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/metadata.yaml rename to pipelines/pull/api/cloudflare/waf_alt/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/sample.json b/pipelines/pull/api/cloudflare/waf_alt/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/sample.json rename to pipelines/pull/api/cloudflare/waf_alt/sample.json diff --git a/pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/serializer.lua b/pipelines/pull/api/cloudflare/waf_alt/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cloudflare_inc_waf_lastest/serializer.lua rename to pipelines/pull/api/cloudflare/waf_alt/serializer.lua diff --git a/pipelines/community/transform_ocsf/confluent_kafka_logs/confluent_kafka_logs.json b/pipelines/pull/api/confluent/kafka/confluent_kafka_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/confluent_kafka_logs/confluent_kafka_logs.json rename to pipelines/pull/api/confluent/kafka/confluent_kafka_logs.json diff --git a/pipelines/community/transform_ocsf/confluent_kafka_logs/metadata.yaml b/pipelines/pull/api/confluent/kafka/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/confluent_kafka_logs/metadata.yaml rename to pipelines/pull/api/confluent/kafka/metadata.yaml diff --git a/pipelines/community/transform_ocsf/confluent_kafka_logs/serializer.lua b/pipelines/pull/api/confluent/kafka/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/confluent_kafka_logs/serializer.lua rename to pipelines/pull/api/confluent/kafka/serializer.lua diff --git a/pipelines/community/transform_ocsf/crowdstrike_detections/crowdstrike_detections.json b/pipelines/pull/api/crowdstrike/detections/crowdstrike_detections.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_detections/crowdstrike_detections.json rename to pipelines/pull/api/crowdstrike/detections/crowdstrike_detections.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_detections/metadata.yaml b/pipelines/pull/api/crowdstrike/detections/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_detections/metadata.yaml rename to pipelines/pull/api/crowdstrike/detections/metadata.yaml diff --git a/pipelines/community/transform_ocsf/crowdstrike_detections/sample.json b/pipelines/pull/api/crowdstrike/detections/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_detections/sample.json rename to pipelines/pull/api/crowdstrike/detections/sample.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_detections/serializer.lua b/pipelines/pull/api/crowdstrike/detections/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_detections/serializer.lua rename to pipelines/pull/api/crowdstrike/detections/serializer.lua diff --git a/pipelines/community/transform_ocsf/crowdstrike_logs/crowdstrike_logs.json b/pipelines/pull/api/crowdstrike/logs/crowdstrike_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_logs/crowdstrike_logs.json rename to pipelines/pull/api/crowdstrike/logs/crowdstrike_logs.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_logs/metadata.yaml b/pipelines/pull/api/crowdstrike/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_logs/metadata.yaml rename to pipelines/pull/api/crowdstrike/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/crowdstrike_logs/sample.json b/pipelines/pull/api/crowdstrike/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_logs/sample.json rename to pipelines/pull/api/crowdstrike/logs/sample.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_logs/serializer.lua b/pipelines/pull/api/crowdstrike/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_logs/serializer.lua rename to pipelines/pull/api/crowdstrike/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/github_audit_logs/github_audit_logs.json b/pipelines/pull/api/github/audit/github_audit_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/github_audit_logs/github_audit_logs.json rename to pipelines/pull/api/github/audit/github_audit_logs.json diff --git a/pipelines/community/transform_ocsf/github_audit_logs/metadata.yaml b/pipelines/pull/api/github/audit/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/github_audit_logs/metadata.yaml rename to pipelines/pull/api/github/audit/metadata.yaml diff --git a/pipelines/community/transform_ocsf/github_audit_logs/sample.json b/pipelines/pull/api/github/audit/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/github_audit_logs/sample.json rename to pipelines/pull/api/github/audit/sample.json diff --git a/pipelines/community/transform_ocsf/github_audit_logs/serializer.lua b/pipelines/pull/api/github/audit/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/github_audit_logs/serializer.lua rename to pipelines/pull/api/github/audit/serializer.lua diff --git a/pipelines/community/transform_ocsf/google_cloud_dns_logs/google_cloud_dns_logs.json b/pipelines/pull/api/google/cloud_dns/google_cloud_dns_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/google_cloud_dns_logs/google_cloud_dns_logs.json rename to pipelines/pull/api/google/cloud_dns/google_cloud_dns_logs.json diff --git a/pipelines/community/transform_ocsf/google_cloud_dns_logs/metadata.yaml b/pipelines/pull/api/google/cloud_dns/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/google_cloud_dns_logs/metadata.yaml rename to pipelines/pull/api/google/cloud_dns/metadata.yaml diff --git a/pipelines/community/transform_ocsf/google_cloud_dns_logs/sample.json b/pipelines/pull/api/google/cloud_dns/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/google_cloud_dns_logs/sample.json rename to pipelines/pull/api/google/cloud_dns/sample.json diff --git a/pipelines/community/transform_ocsf/google_cloud_dns_logs/serializer.lua b/pipelines/pull/api/google/cloud_dns/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/google_cloud_dns_logs/serializer.lua rename to pipelines/pull/api/google/cloud_dns/serializer.lua diff --git a/pipelines/community/transform_ocsf/gcp_vpc_flow/gcp_vpc_flow.json b/pipelines/pull/api/google/gcp_vpc_flow/gcp_vpc_flow.json similarity index 100% rename from pipelines/community/transform_ocsf/gcp_vpc_flow/gcp_vpc_flow.json rename to pipelines/pull/api/google/gcp_vpc_flow/gcp_vpc_flow.json diff --git a/pipelines/community/transform_ocsf/gcp_vpc_flow/metadata.yaml b/pipelines/pull/api/google/gcp_vpc_flow/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/gcp_vpc_flow/metadata.yaml rename to pipelines/pull/api/google/gcp_vpc_flow/metadata.yaml diff --git a/pipelines/community/transform_ocsf/gcp_vpc_flow/sample.json b/pipelines/pull/api/google/gcp_vpc_flow/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/gcp_vpc_flow/sample.json rename to pipelines/pull/api/google/gcp_vpc_flow/sample.json diff --git a/pipelines/community/transform_ocsf/gcp_vpc_flow/serializer.lua b/pipelines/pull/api/google/gcp_vpc_flow/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/gcp_vpc_flow/serializer.lua rename to pipelines/pull/api/google/gcp_vpc_flow/serializer.lua diff --git a/pipelines/community/transform_ocsf/google_workspace_logs/google_workspace_logs.json b/pipelines/pull/api/google/workspace/google_workspace_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/google_workspace_logs/google_workspace_logs.json rename to pipelines/pull/api/google/workspace/google_workspace_logs.json diff --git a/pipelines/community/transform_ocsf/google_workspace_logs/metadata.yaml b/pipelines/pull/api/google/workspace/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/google_workspace_logs/metadata.yaml rename to pipelines/pull/api/google/workspace/metadata.yaml diff --git a/pipelines/community/transform_ocsf/google_workspace_logs/sample.json b/pipelines/pull/api/google/workspace/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/google_workspace_logs/sample.json rename to pipelines/pull/api/google/workspace/sample.json diff --git a/pipelines/community/transform_ocsf/google_workspace_logs/serializer.lua b/pipelines/pull/api/google/workspace/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/google_workspace_logs/serializer.lua rename to pipelines/pull/api/google/workspace/serializer.lua diff --git a/pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/hashicorp_hcp_vault_logs.json b/pipelines/pull/api/hashicorp/hcp_vault/hashicorp_hcp_vault_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/hashicorp_hcp_vault_logs.json rename to pipelines/pull/api/hashicorp/hcp_vault/hashicorp_hcp_vault_logs.json diff --git a/pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/metadata.yaml b/pipelines/pull/api/hashicorp/hcp_vault/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/metadata.yaml rename to pipelines/pull/api/hashicorp/hcp_vault/metadata.yaml diff --git a/pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/sample.json b/pipelines/pull/api/hashicorp/hcp_vault/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/sample.json rename to pipelines/pull/api/hashicorp/hcp_vault/sample.json diff --git a/pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/serializer.lua b/pipelines/pull/api/hashicorp/hcp_vault/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/hashicorp_hcp_vault_logs/serializer.lua rename to pipelines/pull/api/hashicorp/hcp_vault/serializer.lua diff --git a/pipelines/community/transform_ocsf/incapsula_incapsula_logs/incapsula_incapsula_logs.json b/pipelines/pull/api/imperva/incapsula/incapsula_incapsula_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/incapsula_incapsula_logs/incapsula_incapsula_logs.json rename to pipelines/pull/api/imperva/incapsula/incapsula_incapsula_logs.json diff --git a/pipelines/community/transform_ocsf/incapsula_incapsula_logs/metadata.yaml b/pipelines/pull/api/imperva/incapsula/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/incapsula_incapsula_logs/metadata.yaml rename to pipelines/pull/api/imperva/incapsula/metadata.yaml diff --git a/pipelines/community/transform_ocsf/incapsula_incapsula_logs/sample.json b/pipelines/pull/api/imperva/incapsula/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/incapsula_incapsula_logs/sample.json rename to pipelines/pull/api/imperva/incapsula/sample.json diff --git a/pipelines/community/transform_ocsf/incapsula_incapsula_logs/serializer.lua b/pipelines/pull/api/imperva/incapsula/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/incapsula_incapsula_logs/serializer.lua rename to pipelines/pull/api/imperva/incapsula/serializer.lua diff --git a/pipelines/community/transform_ocsf/azure_logs/azure_logs.json b/pipelines/pull/api/microsoft/azure/azure_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/azure_logs/azure_logs.json rename to pipelines/pull/api/microsoft/azure/azure_logs.json diff --git a/pipelines/community/transform_ocsf/azure_logs/metadata.yaml b/pipelines/pull/api/microsoft/azure/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/azure_logs/metadata.yaml rename to pipelines/pull/api/microsoft/azure/metadata.yaml diff --git a/pipelines/community/transform_ocsf/azure_logs/serializer.lua b/pipelines/pull/api/microsoft/azure/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/azure_logs/serializer.lua rename to pipelines/pull/api/microsoft/azure/serializer.lua diff --git a/pipelines/community/transform_ocsf/m365_audit_logs/m365_audit_logs.json b/pipelines/pull/api/microsoft/m365_audit/m365_audit_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/m365_audit_logs/m365_audit_logs.json rename to pipelines/pull/api/microsoft/m365_audit/m365_audit_logs.json diff --git a/pipelines/community/transform_ocsf/m365_audit_logs/metadata.yaml b/pipelines/pull/api/microsoft/m365_audit/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/m365_audit_logs/metadata.yaml rename to pipelines/pull/api/microsoft/m365_audit/metadata.yaml diff --git a/pipelines/community/transform_ocsf/m365_audit_logs/sample.json b/pipelines/pull/api/microsoft/m365_audit/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/m365_audit_logs/sample.json rename to pipelines/pull/api/microsoft/m365_audit/sample.json diff --git a/pipelines/community/transform_ocsf/m365_audit_logs/serializer.lua b/pipelines/pull/api/microsoft/m365_audit/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/m365_audit_logs/serializer.lua rename to pipelines/pull/api/microsoft/m365_audit/serializer.lua diff --git a/pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/metadata.yaml b/pipelines/pull/api/microsoft/m365_mgmt_api/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/metadata.yaml rename to pipelines/pull/api/microsoft/m365_mgmt_api/metadata.yaml diff --git a/pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/microsoft_365_mgmt_api_logs.json b/pipelines/pull/api/microsoft/m365_mgmt_api/microsoft_365_mgmt_api_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/microsoft_365_mgmt_api_logs.json rename to pipelines/pull/api/microsoft/m365_mgmt_api/microsoft_365_mgmt_api_logs.json diff --git a/pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/sample.json b/pipelines/pull/api/microsoft/m365_mgmt_api/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/sample.json rename to pipelines/pull/api/microsoft/m365_mgmt_api/sample.json diff --git a/pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/serializer.lua b/pipelines/pull/api/microsoft/m365_mgmt_api/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_365_mgmt_api_logs/serializer.lua rename to pipelines/pull/api/microsoft/m365_mgmt_api/serializer.lua diff --git a/pipelines/community/transform_ocsf/mimecast_mimecast_logs/metadata.yaml b/pipelines/pull/api/mimecast/mimecast/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/mimecast_mimecast_logs/metadata.yaml rename to pipelines/pull/api/mimecast/mimecast/metadata.yaml diff --git a/pipelines/community/transform_ocsf/mimecast_mimecast_logs/mimecast_mimecast_logs.json b/pipelines/pull/api/mimecast/mimecast/mimecast_mimecast_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/mimecast_mimecast_logs/mimecast_mimecast_logs.json rename to pipelines/pull/api/mimecast/mimecast/mimecast_mimecast_logs.json diff --git a/pipelines/community/transform_ocsf/mimecast_mimecast_logs/sample.json b/pipelines/pull/api/mimecast/mimecast/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/mimecast_mimecast_logs/sample.json rename to pipelines/pull/api/mimecast/mimecast/sample.json diff --git a/pipelines/community/transform_ocsf/mimecast_mimecast_logs/serializer.lua b/pipelines/pull/api/mimecast/mimecast/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/mimecast_mimecast_logs/serializer.lua rename to pipelines/pull/api/mimecast/mimecast/serializer.lua diff --git a/pipelines/community/transform_ocsf/okta_logs/metadata.yaml b/pipelines/pull/api/okta/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/okta_logs/metadata.yaml rename to pipelines/pull/api/okta/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/okta_logs/okta_logs.json b/pipelines/pull/api/okta/logs/okta_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/okta_logs/okta_logs.json rename to pipelines/pull/api/okta/logs/okta_logs.json diff --git a/pipelines/community/transform_ocsf/okta_logs/sample.json b/pipelines/pull/api/okta/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/okta_logs/sample.json rename to pipelines/pull/api/okta/logs/sample.json diff --git a/pipelines/community/transform_ocsf/okta_logs/serializer.lua b/pipelines/pull/api/okta/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/okta_logs/serializer.lua rename to pipelines/pull/api/okta/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/okta_ocsf_logs/metadata.yaml b/pipelines/pull/api/okta/ocsf/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/okta_ocsf_logs/metadata.yaml rename to pipelines/pull/api/okta/ocsf/metadata.yaml diff --git a/pipelines/community/transform_ocsf/okta_ocsf_logs/okta_ocsf_logs.json b/pipelines/pull/api/okta/ocsf/okta_ocsf_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/okta_ocsf_logs/okta_ocsf_logs.json rename to pipelines/pull/api/okta/ocsf/okta_ocsf_logs.json diff --git a/pipelines/community/transform_ocsf/okta_ocsf_logs/sample.json b/pipelines/pull/api/okta/ocsf/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/okta_ocsf_logs/sample.json rename to pipelines/pull/api/okta/ocsf/sample.json diff --git a/pipelines/community/transform_ocsf/okta_ocsf_logs/serializer.lua b/pipelines/pull/api/okta/ocsf/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/okta_ocsf_logs/serializer.lua rename to pipelines/pull/api/okta/ocsf/serializer.lua diff --git a/pipelines/community/transform_ocsf/rubrik_backup_logs/metadata.yaml b/pipelines/pull/api/rubrik/backup/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/rubrik_backup_logs/metadata.yaml rename to pipelines/pull/api/rubrik/backup/metadata.yaml diff --git a/pipelines/community/transform_ocsf/rubrik_backup_logs/rubrik_backup_logs.json b/pipelines/pull/api/rubrik/backup/rubrik_backup_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/rubrik_backup_logs/rubrik_backup_logs.json rename to pipelines/pull/api/rubrik/backup/rubrik_backup_logs.json diff --git a/pipelines/community/transform_ocsf/rubrik_backup_logs/serializer.lua b/pipelines/pull/api/rubrik/backup/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/rubrik_backup_logs/serializer.lua rename to pipelines/pull/api/rubrik/backup/serializer.lua diff --git a/pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/metadata.yaml b/pipelines/pull/api/sentinelone/singularity_identity/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/metadata.yaml rename to pipelines/pull/api/sentinelone/singularity_identity/metadata.yaml diff --git a/pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/sample.json b/pipelines/pull/api/sentinelone/singularity_identity/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/sample.json rename to pipelines/pull/api/sentinelone/singularity_identity/sample.json diff --git a/pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/serializer.lua b/pipelines/pull/api/sentinelone/singularity_identity/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/serializer.lua rename to pipelines/pull/api/sentinelone/singularity_identity/serializer.lua diff --git a/pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/singularityidentity_singularityidentity_logs.json b/pipelines/pull/api/sentinelone/singularity_identity/singularityidentity_singularityidentity_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/singularityidentity_singularityidentity_logs/singularityidentity_singularityidentity_logs.json rename to pipelines/pull/api/sentinelone/singularity_identity/singularityidentity_singularityidentity_logs.json diff --git a/pipelines/community/transform_ocsf/tailscale_tailscale_logs/metadata.yaml b/pipelines/pull/api/tailscale/tailscale/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/tailscale_tailscale_logs/metadata.yaml rename to pipelines/pull/api/tailscale/tailscale/metadata.yaml diff --git a/pipelines/community/transform_ocsf/tailscale_tailscale_logs/sample.json b/pipelines/pull/api/tailscale/tailscale/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/tailscale_tailscale_logs/sample.json rename to pipelines/pull/api/tailscale/tailscale/sample.json diff --git a/pipelines/community/transform_ocsf/tailscale_tailscale_logs/serializer.lua b/pipelines/pull/api/tailscale/tailscale/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/tailscale_tailscale_logs/serializer.lua rename to pipelines/pull/api/tailscale/tailscale/serializer.lua diff --git a/pipelines/community/transform_ocsf/tailscale_tailscale_logs/tailscale_tailscale_logs.json b/pipelines/pull/api/tailscale/tailscale/tailscale_tailscale_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/tailscale_tailscale_logs/tailscale_tailscale_logs.json rename to pipelines/pull/api/tailscale/tailscale/tailscale_tailscale_logs.json diff --git a/pipelines/community/transform_ocsf/teleport_logs/metadata.yaml b/pipelines/pull/api/teleport/audit/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/teleport_logs/metadata.yaml rename to pipelines/pull/api/teleport/audit/metadata.yaml diff --git a/pipelines/community/transform_ocsf/teleport_logs/sample.json b/pipelines/pull/api/teleport/audit/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/teleport_logs/sample.json rename to pipelines/pull/api/teleport/audit/sample.json diff --git a/pipelines/community/transform_ocsf/teleport_logs/serializer.lua b/pipelines/pull/api/teleport/audit/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/teleport_logs/serializer.lua rename to pipelines/pull/api/teleport/audit/serializer.lua diff --git a/pipelines/community/transform_ocsf/teleport_logs/teleport_logs.json b/pipelines/pull/api/teleport/audit/teleport_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/teleport_logs/teleport_logs.json rename to pipelines/pull/api/teleport/audit/teleport_logs.json diff --git a/pipelines/community/transform_ocsf/vectra_ai_logs/metadata.yaml b/pipelines/pull/api/vectra/ai/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/vectra_ai_logs/metadata.yaml rename to pipelines/pull/api/vectra/ai/metadata.yaml diff --git a/pipelines/community/transform_ocsf/vectra_ai_logs/sample.json b/pipelines/pull/api/vectra/ai/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/vectra_ai_logs/sample.json rename to pipelines/pull/api/vectra/ai/sample.json diff --git a/pipelines/community/transform_ocsf/vectra_ai_logs/serializer.lua b/pipelines/pull/api/vectra/ai/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/vectra_ai_logs/serializer.lua rename to pipelines/pull/api/vectra/ai/serializer.lua diff --git a/pipelines/community/transform_ocsf/vectra_ai_logs/vectra_ai_logs.json b/pipelines/pull/api/vectra/ai/vectra_ai_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/vectra_ai_logs/vectra_ai_logs.json rename to pipelines/pull/api/vectra/ai/vectra_ai_logs.json diff --git a/pipelines/community/transform_ocsf/zscaler_dns_firewall/metadata.yaml b/pipelines/pull/api/zscaler/dns_firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_dns_firewall/metadata.yaml rename to pipelines/pull/api/zscaler/dns_firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/zscaler_dns_firewall/sample.json b/pipelines/pull/api/zscaler/dns_firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_dns_firewall/sample.json rename to pipelines/pull/api/zscaler/dns_firewall/sample.json diff --git a/pipelines/community/transform_ocsf/zscaler_dns_firewall/serializer.lua b/pipelines/pull/api/zscaler/dns_firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_dns_firewall/serializer.lua rename to pipelines/pull/api/zscaler/dns_firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/zscaler_dns_firewall/zscaler_dns_firewall.json b/pipelines/pull/api/zscaler/dns_firewall/zscaler_dns_firewall.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_dns_firewall/zscaler_dns_firewall.json rename to pipelines/pull/api/zscaler/dns_firewall/zscaler_dns_firewall.json diff --git a/pipelines/community/transform_ocsf/zscaler_firewall_logs/metadata.yaml b/pipelines/pull/api/zscaler/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_firewall_logs/metadata.yaml rename to pipelines/pull/api/zscaler/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/zscaler_firewall_logs/sample.json b/pipelines/pull/api/zscaler/firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_firewall_logs/sample.json rename to pipelines/pull/api/zscaler/firewall/sample.json diff --git a/pipelines/community/transform_ocsf/zscaler_firewall_logs/serializer.lua b/pipelines/pull/api/zscaler/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_firewall_logs/serializer.lua rename to pipelines/pull/api/zscaler/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/zscaler_firewall_logs/zscaler_firewall_logs.json b/pipelines/pull/api/zscaler/firewall/zscaler_firewall_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_firewall_logs/zscaler_firewall_logs.json rename to pipelines/pull/api/zscaler/firewall/zscaler_firewall_logs.json diff --git a/pipelines/community/transform_ocsf/zscaler_logs/metadata.yaml b/pipelines/pull/api/zscaler/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_logs/metadata.yaml rename to pipelines/pull/api/zscaler/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/zscaler_logs/serializer.lua b/pipelines/pull/api/zscaler/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_logs/serializer.lua rename to pipelines/pull/api/zscaler/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/zscaler_logs/zscaler_logs.json b/pipelines/pull/api/zscaler/logs/zscaler_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_logs/zscaler_logs.json rename to pipelines/pull/api/zscaler/logs/zscaler_logs.json diff --git a/pipelines/community/transform_ocsf/zscaler_zia_logs/metadata.yaml b/pipelines/pull/api/zscaler/zia/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_zia_logs/metadata.yaml rename to pipelines/pull/api/zscaler/zia/metadata.yaml diff --git a/pipelines/community/transform_ocsf/zscaler_zia_logs/serializer.lua b/pipelines/pull/api/zscaler/zia/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_zia_logs/serializer.lua rename to pipelines/pull/api/zscaler/zia/serializer.lua diff --git a/pipelines/community/transform_ocsf/zscaler_zia_logs/zscaler_zia_logs.json b/pipelines/pull/api/zscaler/zia/zscaler_zia_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/zscaler_zia_logs/zscaler_zia_logs.json rename to pipelines/pull/api/zscaler/zia/zscaler_zia_logs.json diff --git a/pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/aws_elasticloadbalancer_logs.json b/pipelines/pull/object_store/aws/elb/aws_elasticloadbalancer_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/aws_elasticloadbalancer_logs.json rename to pipelines/pull/object_store/aws/elb/aws_elasticloadbalancer_logs.json diff --git a/pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/metadata.yaml b/pipelines/pull/object_store/aws/elb/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/metadata.yaml rename to pipelines/pull/object_store/aws/elb/metadata.yaml diff --git a/pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/sample.json b/pipelines/pull/object_store/aws/elb/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/sample.json rename to pipelines/pull/object_store/aws/elb/sample.json diff --git a/pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/serializer.lua b/pipelines/pull/object_store/aws/elb/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/aws_elasticloadbalancer_logs/serializer.lua rename to pipelines/pull/object_store/aws/elb/serializer.lua diff --git a/pipelines/community/transform_ocsf/aws_vpc_dns_logs/aws_vpc_dns_logs.json b/pipelines/pull/object_store/aws/vpc_dns/aws_vpc_dns_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_dns_logs/aws_vpc_dns_logs.json rename to pipelines/pull/object_store/aws/vpc_dns/aws_vpc_dns_logs.json diff --git a/pipelines/community/transform_ocsf/aws_vpc_dns_logs/metadata.yaml b/pipelines/pull/object_store/aws/vpc_dns/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_dns_logs/metadata.yaml rename to pipelines/pull/object_store/aws/vpc_dns/metadata.yaml diff --git a/pipelines/community/transform_ocsf/aws_vpc_dns_logs/sample.json b/pipelines/pull/object_store/aws/vpc_dns/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_dns_logs/sample.json rename to pipelines/pull/object_store/aws/vpc_dns/sample.json diff --git a/pipelines/community/transform_ocsf/aws_vpc_dns_logs/serializer.lua b/pipelines/pull/object_store/aws/vpc_dns/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_dns_logs/serializer.lua rename to pipelines/pull/object_store/aws/vpc_dns/serializer.lua diff --git a/pipelines/community/transform_ocsf/aws_vpc_flow/aws_vpc_flow.json b/pipelines/pull/object_store/aws/vpc_flow/aws_vpc_flow.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_flow/aws_vpc_flow.json rename to pipelines/pull/object_store/aws/vpc_flow/aws_vpc_flow.json diff --git a/pipelines/community/transform_ocsf/aws_vpc_flow/metadata.yaml b/pipelines/pull/object_store/aws/vpc_flow/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_flow/metadata.yaml rename to pipelines/pull/object_store/aws/vpc_flow/metadata.yaml diff --git a/pipelines/community/transform_ocsf/aws_vpc_flow/sample.json b/pipelines/pull/object_store/aws/vpc_flow/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_flow/sample.json rename to pipelines/pull/object_store/aws/vpc_flow/sample.json diff --git a/pipelines/community/transform_ocsf/aws_vpc_flow/serializer.lua b/pipelines/pull/object_store/aws/vpc_flow/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/aws_vpc_flow/serializer.lua rename to pipelines/pull/object_store/aws/vpc_flow/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_umbrella_logs/cisco_umbrella_logs.json b/pipelines/pull/object_store/cisco/umbrella/cisco_umbrella_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_umbrella_logs/cisco_umbrella_logs.json rename to pipelines/pull/object_store/cisco/umbrella/cisco_umbrella_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_umbrella_logs/metadata.yaml b/pipelines/pull/object_store/cisco/umbrella/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_umbrella_logs/metadata.yaml rename to pipelines/pull/object_store/cisco/umbrella/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_umbrella_logs/sample.json b/pipelines/pull/object_store/cisco/umbrella/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_umbrella_logs/sample.json rename to pipelines/pull/object_store/cisco/umbrella/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_umbrella_logs/serializer.lua b/pipelines/pull/object_store/cisco/umbrella/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_umbrella_logs/serializer.lua rename to pipelines/pull/object_store/cisco/umbrella/serializer.lua diff --git a/pipelines/community/transform_ocsf/azure_nsg_flow_logs/azure_nsg_flow_logs.json b/pipelines/pull/object_store/microsoft/azure_nsg_flow/azure_nsg_flow_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/azure_nsg_flow_logs/azure_nsg_flow_logs.json rename to pipelines/pull/object_store/microsoft/azure_nsg_flow/azure_nsg_flow_logs.json diff --git a/pipelines/community/transform_ocsf/azure_nsg_flow_logs/metadata.yaml b/pipelines/pull/object_store/microsoft/azure_nsg_flow/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/azure_nsg_flow_logs/metadata.yaml rename to pipelines/pull/object_store/microsoft/azure_nsg_flow/metadata.yaml diff --git a/pipelines/community/transform_ocsf/azure_nsg_flow_logs/sample.json b/pipelines/pull/object_store/microsoft/azure_nsg_flow/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/azure_nsg_flow_logs/sample.json rename to pipelines/pull/object_store/microsoft/azure_nsg_flow/sample.json diff --git a/pipelines/community/transform_ocsf/azure_nsg_flow_logs/serializer.lua b/pipelines/pull/object_store/microsoft/azure_nsg_flow/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/azure_nsg_flow_logs/serializer.lua rename to pipelines/pull/object_store/microsoft/azure_nsg_flow/serializer.lua diff --git a/pipelines/community/transform_ocsf/akamai_cdn/akamai_cdn.json b/pipelines/push/syslog/akamai/cdn/akamai_cdn.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_cdn/akamai_cdn.json rename to pipelines/push/syslog/akamai/cdn/akamai_cdn.json diff --git a/pipelines/community/transform_ocsf/akamai_cdn/metadata.yaml b/pipelines/push/syslog/akamai/cdn/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/akamai_cdn/metadata.yaml rename to pipelines/push/syslog/akamai/cdn/metadata.yaml diff --git a/pipelines/community/transform_ocsf/akamai_cdn/sample.json b/pipelines/push/syslog/akamai/cdn/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_cdn/sample.json rename to pipelines/push/syslog/akamai/cdn/sample.json diff --git a/pipelines/community/transform_ocsf/akamai_cdn/serializer.lua b/pipelines/push/syslog/akamai/cdn/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/akamai_cdn/serializer.lua rename to pipelines/push/syslog/akamai/cdn/serializer.lua diff --git a/pipelines/community/transform_ocsf/akamai_dns/akamai_dns.json b/pipelines/push/syslog/akamai/dns/akamai_dns.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_dns/akamai_dns.json rename to pipelines/push/syslog/akamai/dns/akamai_dns.json diff --git a/pipelines/community/transform_ocsf/akamai_dns/metadata.yaml b/pipelines/push/syslog/akamai/dns/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/akamai_dns/metadata.yaml rename to pipelines/push/syslog/akamai/dns/metadata.yaml diff --git a/pipelines/community/transform_ocsf/akamai_dns/sample.json b/pipelines/push/syslog/akamai/dns/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_dns/sample.json rename to pipelines/push/syslog/akamai/dns/sample.json diff --git a/pipelines/community/transform_ocsf/akamai_dns/serializer.lua b/pipelines/push/syslog/akamai/dns/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/akamai_dns/serializer.lua rename to pipelines/push/syslog/akamai/dns/serializer.lua diff --git a/pipelines/community/transform_ocsf/akamai_general/akamai_general.json b/pipelines/push/syslog/akamai/general/akamai_general.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_general/akamai_general.json rename to pipelines/push/syslog/akamai/general/akamai_general.json diff --git a/pipelines/community/transform_ocsf/akamai_general/metadata.yaml b/pipelines/push/syslog/akamai/general/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/akamai_general/metadata.yaml rename to pipelines/push/syslog/akamai/general/metadata.yaml diff --git a/pipelines/community/transform_ocsf/akamai_general/sample.json b/pipelines/push/syslog/akamai/general/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_general/sample.json rename to pipelines/push/syslog/akamai/general/sample.json diff --git a/pipelines/community/transform_ocsf/akamai_general/serializer.lua b/pipelines/push/syslog/akamai/general/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/akamai_general/serializer.lua rename to pipelines/push/syslog/akamai/general/serializer.lua diff --git a/pipelines/community/transform_ocsf/akamai_sitedefender/akamai_sitedefender.json b/pipelines/push/syslog/akamai/sitedefender/akamai_sitedefender.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_sitedefender/akamai_sitedefender.json rename to pipelines/push/syslog/akamai/sitedefender/akamai_sitedefender.json diff --git a/pipelines/community/transform_ocsf/akamai_sitedefender/metadata.yaml b/pipelines/push/syslog/akamai/sitedefender/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/akamai_sitedefender/metadata.yaml rename to pipelines/push/syslog/akamai/sitedefender/metadata.yaml diff --git a/pipelines/community/transform_ocsf/akamai_sitedefender/sample.json b/pipelines/push/syslog/akamai/sitedefender/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/akamai_sitedefender/sample.json rename to pipelines/push/syslog/akamai/sitedefender/sample.json diff --git a/pipelines/community/transform_ocsf/akamai_sitedefender/serializer.lua b/pipelines/push/syslog/akamai/sitedefender/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/akamai_sitedefender/serializer.lua rename to pipelines/push/syslog/akamai/sitedefender/serializer.lua diff --git a/pipelines/community/transform_ocsf/apache_http_logs/apache_http_logs.json b/pipelines/push/syslog/apache/http/apache_http_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/apache_http_logs/apache_http_logs.json rename to pipelines/push/syslog/apache/http/apache_http_logs.json diff --git a/pipelines/community/transform_ocsf/apache_http_logs/metadata.yaml b/pipelines/push/syslog/apache/http/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/apache_http_logs/metadata.yaml rename to pipelines/push/syslog/apache/http/metadata.yaml diff --git a/pipelines/community/transform_ocsf/apache_http_logs/sample.json b/pipelines/push/syslog/apache/http/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/apache_http_logs/sample.json rename to pipelines/push/syslog/apache/http/sample.json diff --git a/pipelines/community/transform_ocsf/apache_http_logs/serializer.lua b/pipelines/push/syslog/apache/http/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/apache_http_logs/serializer.lua rename to pipelines/push/syslog/apache/http/serializer.lua diff --git a/pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/barracuda_firewall_logs_latest.json b/pipelines/push/syslog/barracuda/firewall/barracuda_firewall_logs_latest.json similarity index 100% rename from pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/barracuda_firewall_logs_latest.json rename to pipelines/push/syslog/barracuda/firewall/barracuda_firewall_logs_latest.json diff --git a/pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/metadata.yaml b/pipelines/push/syslog/barracuda/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/metadata.yaml rename to pipelines/push/syslog/barracuda/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/serializer.lua b/pipelines/push/syslog/barracuda/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/barracuda_firewall_logs_latest/serializer.lua rename to pipelines/push/syslog/barracuda/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/beyondtrust_passwordsafe_logs.json b/pipelines/push/syslog/beyondtrust/passwordsafe/beyondtrust_passwordsafe_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/beyondtrust_passwordsafe_logs.json rename to pipelines/push/syslog/beyondtrust/passwordsafe/beyondtrust_passwordsafe_logs.json diff --git a/pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/metadata.yaml b/pipelines/push/syslog/beyondtrust/passwordsafe/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/metadata.yaml rename to pipelines/push/syslog/beyondtrust/passwordsafe/metadata.yaml diff --git a/pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/sample.json b/pipelines/push/syslog/beyondtrust/passwordsafe/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/sample.json rename to pipelines/push/syslog/beyondtrust/passwordsafe/sample.json diff --git a/pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/serializer.lua b/pipelines/push/syslog/beyondtrust/passwordsafe/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/beyondtrust_passwordsafe_logs/serializer.lua rename to pipelines/push/syslog/beyondtrust/passwordsafe/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_asa_logs/cisco_asa_logs.json b/pipelines/push/syslog/cisco/asa/cisco_asa_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_asa_logs/cisco_asa_logs.json rename to pipelines/push/syslog/cisco/asa/cisco_asa_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_asa_logs/metadata.yaml b/pipelines/push/syslog/cisco/asa/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_asa_logs/metadata.yaml rename to pipelines/push/syslog/cisco/asa/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_asa_logs/sample.json b/pipelines/push/syslog/cisco/asa/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_asa_logs/sample.json rename to pipelines/push/syslog/cisco/asa/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_asa_logs/serializer.lua b/pipelines/push/syslog/cisco/asa/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_asa_logs/serializer.lua rename to pipelines/push/syslog/cisco/asa/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_combo_logs/cisco_combo_logs.json b/pipelines/push/syslog/cisco/combo/cisco_combo_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_combo_logs/cisco_combo_logs.json rename to pipelines/push/syslog/cisco/combo/cisco_combo_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_combo_logs/metadata.yaml b/pipelines/push/syslog/cisco/combo/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_combo_logs/metadata.yaml rename to pipelines/push/syslog/cisco/combo/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_combo_logs/sample.json b/pipelines/push/syslog/cisco/combo/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_combo_logs/sample.json rename to pipelines/push/syslog/cisco/combo/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_combo_logs/serializer.lua b/pipelines/push/syslog/cisco/combo/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_combo_logs/serializer.lua rename to pipelines/push/syslog/cisco/combo/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_firewall/cisco_firewall.json b/pipelines/push/syslog/cisco/firewall/cisco_firewall.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_firewall/cisco_firewall.json rename to pipelines/push/syslog/cisco/firewall/cisco_firewall.json diff --git a/pipelines/community/transform_ocsf/cisco_firewall/metadata.yaml b/pipelines/push/syslog/cisco/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_firewall/metadata.yaml rename to pipelines/push/syslog/cisco/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_firewall/sample.json b/pipelines/push/syslog/cisco/firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_firewall/sample.json rename to pipelines/push/syslog/cisco/firewall/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_firewall/serializer.lua b/pipelines/push/syslog/cisco/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_firewall/serializer.lua rename to pipelines/push/syslog/cisco/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_fmc_logs/cisco_fmc_logs.json b/pipelines/push/syslog/cisco/fmc/cisco_fmc_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_fmc_logs/cisco_fmc_logs.json rename to pipelines/push/syslog/cisco/fmc/cisco_fmc_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_fmc_logs/metadata.yaml b/pipelines/push/syslog/cisco/fmc/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_fmc_logs/metadata.yaml rename to pipelines/push/syslog/cisco/fmc/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_fmc_logs/sample.json b/pipelines/push/syslog/cisco/fmc/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_fmc_logs/sample.json rename to pipelines/push/syslog/cisco/fmc/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_fmc_logs/serializer.lua b/pipelines/push/syslog/cisco/fmc/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_fmc_logs/serializer.lua rename to pipelines/push/syslog/cisco/fmc/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_ios_logs/cisco_ios_logs.json b/pipelines/push/syslog/cisco/ios/cisco_ios_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ios_logs/cisco_ios_logs.json rename to pipelines/push/syslog/cisco/ios/cisco_ios_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_ios_logs/metadata.yaml b/pipelines/push/syslog/cisco/ios/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ios_logs/metadata.yaml rename to pipelines/push/syslog/cisco/ios/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_ios_logs/sample.json b/pipelines/push/syslog/cisco/ios/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ios_logs/sample.json rename to pipelines/push/syslog/cisco/ios/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_ios_logs/serializer.lua b/pipelines/push/syslog/cisco/ios/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ios_logs/serializer.lua rename to pipelines/push/syslog/cisco/ios/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_ironport/cisco_ironport.json b/pipelines/push/syslog/cisco/ironport/cisco_ironport.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ironport/cisco_ironport.json rename to pipelines/push/syslog/cisco/ironport/cisco_ironport.json diff --git a/pipelines/community/transform_ocsf/cisco_ironport/metadata.yaml b/pipelines/push/syslog/cisco/ironport/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ironport/metadata.yaml rename to pipelines/push/syslog/cisco/ironport/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_ironport/sample.json b/pipelines/push/syslog/cisco/ironport/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ironport/sample.json rename to pipelines/push/syslog/cisco/ironport/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_ironport/serializer.lua b/pipelines/push/syslog/cisco/ironport/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ironport/serializer.lua rename to pipelines/push/syslog/cisco/ironport/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_isa3000_logs/cisco_isa3000_logs.json b/pipelines/push/syslog/cisco/isa3000/cisco_isa3000_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_isa3000_logs/cisco_isa3000_logs.json rename to pipelines/push/syslog/cisco/isa3000/cisco_isa3000_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_isa3000_logs/metadata.yaml b/pipelines/push/syslog/cisco/isa3000/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_isa3000_logs/metadata.yaml rename to pipelines/push/syslog/cisco/isa3000/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_isa3000_logs/sample.json b/pipelines/push/syslog/cisco/isa3000/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_isa3000_logs/sample.json rename to pipelines/push/syslog/cisco/isa3000/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_isa3000_logs/serializer.lua b/pipelines/push/syslog/cisco/isa3000/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_isa3000_logs/serializer.lua rename to pipelines/push/syslog/cisco/isa3000/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_ise_logs/cisco_ise_logs.json b/pipelines/push/syslog/cisco/ise/cisco_ise_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ise_logs/cisco_ise_logs.json rename to pipelines/push/syslog/cisco/ise/cisco_ise_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_ise_logs/metadata.yaml b/pipelines/push/syslog/cisco/ise/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ise_logs/metadata.yaml rename to pipelines/push/syslog/cisco/ise/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_ise_logs/sample.json b/pipelines/push/syslog/cisco/ise/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ise_logs/sample.json rename to pipelines/push/syslog/cisco/ise/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_ise_logs/serializer.lua b/pipelines/push/syslog/cisco/ise/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_ise_logs/serializer.lua rename to pipelines/push/syslog/cisco/ise/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_logs/cisco_logs.json b/pipelines/push/syslog/cisco/logs/cisco_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_logs/cisco_logs.json rename to pipelines/push/syslog/cisco/logs/cisco_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_logs/metadata.yaml b/pipelines/push/syslog/cisco/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_logs/metadata.yaml rename to pipelines/push/syslog/cisco/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_logs/sample.json b/pipelines/push/syslog/cisco/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_logs/sample.json rename to pipelines/push/syslog/cisco/logs/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_logs/serializer.lua b/pipelines/push/syslog/cisco/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_logs/serializer.lua rename to pipelines/push/syslog/cisco/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_meraki/cisco_meraki.json b/pipelines/push/syslog/cisco/meraki/cisco_meraki.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki/cisco_meraki.json rename to pipelines/push/syslog/cisco/meraki/cisco_meraki.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki/metadata.yaml b/pipelines/push/syslog/cisco/meraki/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki/metadata.yaml rename to pipelines/push/syslog/cisco/meraki/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_meraki/sample.json b/pipelines/push/syslog/cisco/meraki/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki/sample.json rename to pipelines/push/syslog/cisco/meraki/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki/serializer.lua b/pipelines/push/syslog/cisco/meraki/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki/serializer.lua rename to pipelines/push/syslog/cisco/meraki/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_meraki_flow_logs/cisco_meraki_flow_logs.json b/pipelines/push/syslog/cisco/meraki_flow/cisco_meraki_flow_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_flow_logs/cisco_meraki_flow_logs.json rename to pipelines/push/syslog/cisco/meraki_flow/cisco_meraki_flow_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki_flow_logs/metadata.yaml b/pipelines/push/syslog/cisco/meraki_flow/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_flow_logs/metadata.yaml rename to pipelines/push/syslog/cisco/meraki_flow/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_meraki_flow_logs/sample.json b/pipelines/push/syslog/cisco/meraki_flow/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_flow_logs/sample.json rename to pipelines/push/syslog/cisco/meraki_flow/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki_flow_logs/serializer.lua b/pipelines/push/syslog/cisco/meraki_flow/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_flow_logs/serializer.lua rename to pipelines/push/syslog/cisco/meraki_flow/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_meraki_logs/cisco_meraki_logs.json b/pipelines/push/syslog/cisco/meraki_v2/cisco_meraki_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_logs/cisco_meraki_logs.json rename to pipelines/push/syslog/cisco/meraki_v2/cisco_meraki_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki_logs/metadata.yaml b/pipelines/push/syslog/cisco/meraki_v2/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_logs/metadata.yaml rename to pipelines/push/syslog/cisco/meraki_v2/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_meraki_logs/sample.json b/pipelines/push/syslog/cisco/meraki_v2/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_logs/sample.json rename to pipelines/push/syslog/cisco/meraki_v2/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_meraki_logs/serializer.lua b/pipelines/push/syslog/cisco/meraki_v2/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_meraki_logs/serializer.lua rename to pipelines/push/syslog/cisco/meraki_v2/serializer.lua diff --git a/pipelines/community/transform_ocsf/meraki_logs/meraki_logs.json b/pipelines/push/syslog/cisco/meraki_v3/meraki_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/meraki_logs/meraki_logs.json rename to pipelines/push/syslog/cisco/meraki_v3/meraki_logs.json diff --git a/pipelines/community/transform_ocsf/meraki_logs/metadata.yaml b/pipelines/push/syslog/cisco/meraki_v3/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/meraki_logs/metadata.yaml rename to pipelines/push/syslog/cisco/meraki_v3/metadata.yaml diff --git a/pipelines/community/transform_ocsf/meraki_logs/sample.json b/pipelines/push/syslog/cisco/meraki_v3/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/meraki_logs/sample.json rename to pipelines/push/syslog/cisco/meraki_v3/sample.json diff --git a/pipelines/community/transform_ocsf/meraki_logs/serializer.lua b/pipelines/push/syslog/cisco/meraki_v3/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/meraki_logs/serializer.lua rename to pipelines/push/syslog/cisco/meraki_v3/serializer.lua diff --git a/pipelines/community/transform_ocsf/cisco_networks_logs/cisco_networks_logs.json b/pipelines/push/syslog/cisco/networks/cisco_networks_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_networks_logs/cisco_networks_logs.json rename to pipelines/push/syslog/cisco/networks/cisco_networks_logs.json diff --git a/pipelines/community/transform_ocsf/cisco_networks_logs/metadata.yaml b/pipelines/push/syslog/cisco/networks/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cisco_networks_logs/metadata.yaml rename to pipelines/push/syslog/cisco/networks/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cisco_networks_logs/sample.json b/pipelines/push/syslog/cisco/networks/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cisco_networks_logs/sample.json rename to pipelines/push/syslog/cisco/networks/sample.json diff --git a/pipelines/community/transform_ocsf/cisco_networks_logs/serializer.lua b/pipelines/push/syslog/cisco/networks/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cisco_networks_logs/serializer.lua rename to pipelines/push/syslog/cisco/networks/serializer.lua diff --git a/pipelines/community/transform_ocsf/citrix_netscaler_logs/citrix_netscaler_logs.json b/pipelines/push/syslog/citrix/netscaler/citrix_netscaler_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/citrix_netscaler_logs/citrix_netscaler_logs.json rename to pipelines/push/syslog/citrix/netscaler/citrix_netscaler_logs.json diff --git a/pipelines/community/transform_ocsf/citrix_netscaler_logs/metadata.yaml b/pipelines/push/syslog/citrix/netscaler/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/citrix_netscaler_logs/metadata.yaml rename to pipelines/push/syslog/citrix/netscaler/metadata.yaml diff --git a/pipelines/community/transform_ocsf/citrix_netscaler_logs/sample.json b/pipelines/push/syslog/citrix/netscaler/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/citrix_netscaler_logs/sample.json rename to pipelines/push/syslog/citrix/netscaler/sample.json diff --git a/pipelines/community/transform_ocsf/citrix_netscaler_logs/serializer.lua b/pipelines/push/syslog/citrix/netscaler/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/citrix_netscaler_logs/serializer.lua rename to pipelines/push/syslog/citrix/netscaler/serializer.lua diff --git a/pipelines/community/transform_ocsf/crowdstrike_endpoint/crowdstrike_endpoint.json b/pipelines/push/syslog/crowdstrike/endpoint/crowdstrike_endpoint.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_endpoint/crowdstrike_endpoint.json rename to pipelines/push/syslog/crowdstrike/endpoint/crowdstrike_endpoint.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_endpoint/metadata.yaml b/pipelines/push/syslog/crowdstrike/endpoint/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_endpoint/metadata.yaml rename to pipelines/push/syslog/crowdstrike/endpoint/metadata.yaml diff --git a/pipelines/community/transform_ocsf/crowdstrike_endpoint/sample.json b/pipelines/push/syslog/crowdstrike/endpoint/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_endpoint/sample.json rename to pipelines/push/syslog/crowdstrike/endpoint/sample.json diff --git a/pipelines/community/transform_ocsf/crowdstrike_endpoint/serializer.lua b/pipelines/push/syslog/crowdstrike/endpoint/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/crowdstrike_endpoint/serializer.lua rename to pipelines/push/syslog/crowdstrike/endpoint/serializer.lua diff --git a/pipelines/community/transform_ocsf/cyberark_conjur/cyberark_conjur.json b/pipelines/push/syslog/cyberark/conjur/cyberark_conjur.json similarity index 100% rename from pipelines/community/transform_ocsf/cyberark_conjur/cyberark_conjur.json rename to pipelines/push/syslog/cyberark/conjur/cyberark_conjur.json diff --git a/pipelines/community/transform_ocsf/cyberark_conjur/metadata.yaml b/pipelines/push/syslog/cyberark/conjur/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/cyberark_conjur/metadata.yaml rename to pipelines/push/syslog/cyberark/conjur/metadata.yaml diff --git a/pipelines/community/transform_ocsf/cyberark_conjur/sample.json b/pipelines/push/syslog/cyberark/conjur/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/cyberark_conjur/sample.json rename to pipelines/push/syslog/cyberark/conjur/sample.json diff --git a/pipelines/community/transform_ocsf/cyberark_conjur/serializer.lua b/pipelines/push/syslog/cyberark/conjur/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/cyberark_conjur/serializer.lua rename to pipelines/push/syslog/cyberark/conjur/serializer.lua diff --git a/pipelines/community/transform_ocsf/f5_networks_logs/f5_networks_logs.json b/pipelines/push/syslog/f5/networks/f5_networks_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/f5_networks_logs/f5_networks_logs.json rename to pipelines/push/syslog/f5/networks/f5_networks_logs.json diff --git a/pipelines/community/transform_ocsf/f5_networks_logs/metadata.yaml b/pipelines/push/syslog/f5/networks/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/f5_networks_logs/metadata.yaml rename to pipelines/push/syslog/f5/networks/metadata.yaml diff --git a/pipelines/community/transform_ocsf/f5_networks_logs/sample.json b/pipelines/push/syslog/f5/networks/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/f5_networks_logs/sample.json rename to pipelines/push/syslog/f5/networks/sample.json diff --git a/pipelines/community/transform_ocsf/f5_networks_logs/serializer.lua b/pipelines/push/syslog/f5/networks/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/f5_networks_logs/serializer.lua rename to pipelines/push/syslog/f5/networks/serializer.lua diff --git a/pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/forcepoint_forcepoint_logs.json b/pipelines/push/syslog/forcepoint/forcepoint/forcepoint_forcepoint_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/forcepoint_forcepoint_logs.json rename to pipelines/push/syslog/forcepoint/forcepoint/forcepoint_forcepoint_logs.json diff --git a/pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/metadata.yaml b/pipelines/push/syslog/forcepoint/forcepoint/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/metadata.yaml rename to pipelines/push/syslog/forcepoint/forcepoint/metadata.yaml diff --git a/pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/sample.json b/pipelines/push/syslog/forcepoint/forcepoint/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/sample.json rename to pipelines/push/syslog/forcepoint/forcepoint/sample.json diff --git a/pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/serializer.lua b/pipelines/push/syslog/forcepoint/forcepoint/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/forcepoint_forcepoint_logs/serializer.lua rename to pipelines/push/syslog/forcepoint/forcepoint/serializer.lua diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate/fortinet_fortigate.json b/pipelines/push/syslog/fortinet/fortigate/fortinet_fortigate.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate/fortinet_fortigate.json rename to pipelines/push/syslog/fortinet/fortigate/fortinet_fortigate.json diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate/metadata.yaml b/pipelines/push/syslog/fortinet/fortigate/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate/metadata.yaml rename to pipelines/push/syslog/fortinet/fortigate/metadata.yaml diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate/sample.json b/pipelines/push/syslog/fortinet/fortigate/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate/sample.json rename to pipelines/push/syslog/fortinet/fortigate/sample.json diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate/serializer.lua b/pipelines/push/syslog/fortinet/fortigate/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate/serializer.lua rename to pipelines/push/syslog/fortinet/fortigate/serializer.lua diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/fortinet_fortigate_candidate_logs.json b/pipelines/push/syslog/fortinet/fortigate_candidate/fortinet_fortigate_candidate_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/fortinet_fortigate_candidate_logs.json rename to pipelines/push/syslog/fortinet/fortigate_candidate/fortinet_fortigate_candidate_logs.json diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/metadata.yaml b/pipelines/push/syslog/fortinet/fortigate_candidate/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/metadata.yaml rename to pipelines/push/syslog/fortinet/fortigate_candidate/metadata.yaml diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/sample.json b/pipelines/push/syslog/fortinet/fortigate_candidate/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/sample.json rename to pipelines/push/syslog/fortinet/fortigate_candidate/sample.json diff --git a/pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/serializer.lua b/pipelines/push/syslog/fortinet/fortigate_candidate/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_fortigate_candidate_logs/serializer.lua rename to pipelines/push/syslog/fortinet/fortigate_candidate/serializer.lua diff --git a/pipelines/community/transform_ocsf/fortigate_logs/fortigate_logs.json b/pipelines/push/syslog/fortinet/fortigate_v2/fortigate_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/fortigate_logs/fortigate_logs.json rename to pipelines/push/syslog/fortinet/fortigate_v2/fortigate_logs.json diff --git a/pipelines/community/transform_ocsf/fortigate_logs/metadata.yaml b/pipelines/push/syslog/fortinet/fortigate_v2/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/fortigate_logs/metadata.yaml rename to pipelines/push/syslog/fortinet/fortigate_v2/metadata.yaml diff --git a/pipelines/community/transform_ocsf/fortigate_logs/sample.json b/pipelines/push/syslog/fortinet/fortigate_v2/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/fortigate_logs/sample.json rename to pipelines/push/syslog/fortinet/fortigate_v2/sample.json diff --git a/pipelines/community/transform_ocsf/fortigate_logs/serializer.lua b/pipelines/push/syslog/fortinet/fortigate_v2/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/fortigate_logs/serializer.lua rename to pipelines/push/syslog/fortinet/fortigate_v2/serializer.lua diff --git a/pipelines/community/transform_ocsf/fortimanager_logs/fortimanager_logs.json b/pipelines/push/syslog/fortinet/fortimanager/fortimanager_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/fortimanager_logs/fortimanager_logs.json rename to pipelines/push/syslog/fortinet/fortimanager/fortimanager_logs.json diff --git a/pipelines/community/transform_ocsf/fortimanager_logs/metadata.yaml b/pipelines/push/syslog/fortinet/fortimanager/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/fortimanager_logs/metadata.yaml rename to pipelines/push/syslog/fortinet/fortimanager/metadata.yaml diff --git a/pipelines/community/transform_ocsf/fortimanager_logs/sample.json b/pipelines/push/syslog/fortinet/fortimanager/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/fortimanager_logs/sample.json rename to pipelines/push/syslog/fortinet/fortimanager/sample.json diff --git a/pipelines/community/transform_ocsf/fortimanager_logs/serializer.lua b/pipelines/push/syslog/fortinet/fortimanager/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/fortimanager_logs/serializer.lua rename to pipelines/push/syslog/fortinet/fortimanager/serializer.lua diff --git a/pipelines/community/transform_ocsf/fortinet_logs/fortinet_logs.json b/pipelines/push/syslog/fortinet/logs/fortinet_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_logs/fortinet_logs.json rename to pipelines/push/syslog/fortinet/logs/fortinet_logs.json diff --git a/pipelines/community/transform_ocsf/fortinet_logs/metadata.yaml b/pipelines/push/syslog/fortinet/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_logs/metadata.yaml rename to pipelines/push/syslog/fortinet/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/fortinet_logs/sample.json b/pipelines/push/syslog/fortinet/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_logs/sample.json rename to pipelines/push/syslog/fortinet/logs/sample.json diff --git a/pipelines/community/transform_ocsf/fortinet_logs/serializer.lua b/pipelines/push/syslog/fortinet/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/fortinet_logs/serializer.lua rename to pipelines/push/syslog/fortinet/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/haproxy_loadbalancer_logs.json b/pipelines/push/syslog/haproxy/loadbalancer/haproxy_loadbalancer_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/haproxy_loadbalancer_logs.json rename to pipelines/push/syslog/haproxy/loadbalancer/haproxy_loadbalancer_logs.json diff --git a/pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/metadata.yaml b/pipelines/push/syslog/haproxy/loadbalancer/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/metadata.yaml rename to pipelines/push/syslog/haproxy/loadbalancer/metadata.yaml diff --git a/pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/sample.json b/pipelines/push/syslog/haproxy/loadbalancer/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/sample.json rename to pipelines/push/syslog/haproxy/loadbalancer/sample.json diff --git a/pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/serializer.lua b/pipelines/push/syslog/haproxy/loadbalancer/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/haproxy_loadbalancer_logs/serializer.lua rename to pipelines/push/syslog/haproxy/loadbalancer/serializer.lua diff --git a/pipelines/community/transform_ocsf/imperva_waf_logs/imperva_waf_logs.json b/pipelines/push/syslog/imperva/waf/imperva_waf_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/imperva_waf_logs/imperva_waf_logs.json rename to pipelines/push/syslog/imperva/waf/imperva_waf_logs.json diff --git a/pipelines/community/transform_ocsf/imperva_waf_logs/metadata.yaml b/pipelines/push/syslog/imperva/waf/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/imperva_waf_logs/metadata.yaml rename to pipelines/push/syslog/imperva/waf/metadata.yaml diff --git a/pipelines/community/transform_ocsf/imperva_waf_logs/sample.json b/pipelines/push/syslog/imperva/waf/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/imperva_waf_logs/sample.json rename to pipelines/push/syslog/imperva/waf/sample.json diff --git a/pipelines/community/transform_ocsf/imperva_waf_logs/serializer.lua b/pipelines/push/syslog/imperva/waf/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/imperva_waf_logs/serializer.lua rename to pipelines/push/syslog/imperva/waf/serializer.lua diff --git a/pipelines/community/transform_ocsf/infoblox_logs/infoblox_logs.json b/pipelines/push/syslog/infoblox/logs/infoblox_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/infoblox_logs/infoblox_logs.json rename to pipelines/push/syslog/infoblox/logs/infoblox_logs.json diff --git a/pipelines/community/transform_ocsf/infoblox_logs/metadata.yaml b/pipelines/push/syslog/infoblox/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/infoblox_logs/metadata.yaml rename to pipelines/push/syslog/infoblox/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/infoblox_logs/sample.json b/pipelines/push/syslog/infoblox/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/infoblox_logs/sample.json rename to pipelines/push/syslog/infoblox/logs/sample.json diff --git a/pipelines/community/transform_ocsf/infoblox_logs/serializer.lua b/pipelines/push/syslog/infoblox/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/infoblox_logs/serializer.lua rename to pipelines/push/syslog/infoblox/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/juniper_logs/juniper_logs.json b/pipelines/push/syslog/juniper/logs/juniper_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/juniper_logs/juniper_logs.json rename to pipelines/push/syslog/juniper/logs/juniper_logs.json diff --git a/pipelines/community/transform_ocsf/juniper_logs/metadata.yaml b/pipelines/push/syslog/juniper/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/juniper_logs/metadata.yaml rename to pipelines/push/syslog/juniper/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/juniper_logs/sample.json b/pipelines/push/syslog/juniper/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/juniper_logs/sample.json rename to pipelines/push/syslog/juniper/logs/sample.json diff --git a/pipelines/community/transform_ocsf/juniper_logs/serializer.lua b/pipelines/push/syslog/juniper/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/juniper_logs/serializer.lua rename to pipelines/push/syslog/juniper/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/linux_auth/linux_auth.json b/pipelines/push/syslog/linux/auth/linux_auth.json similarity index 100% rename from pipelines/community/transform_ocsf/linux_auth/linux_auth.json rename to pipelines/push/syslog/linux/auth/linux_auth.json diff --git a/pipelines/community/transform_ocsf/linux_auth/metadata.yaml b/pipelines/push/syslog/linux/auth/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/linux_auth/metadata.yaml rename to pipelines/push/syslog/linux/auth/metadata.yaml diff --git a/pipelines/community/transform_ocsf/linux_auth/sample.json b/pipelines/push/syslog/linux/auth/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/linux_auth/sample.json rename to pipelines/push/syslog/linux/auth/sample.json diff --git a/pipelines/community/transform_ocsf/linux_auth/serializer.lua b/pipelines/push/syslog/linux/auth/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/linux_auth/serializer.lua rename to pipelines/push/syslog/linux/auth/serializer.lua diff --git a/pipelines/community/transform_ocsf/dhcp_logs/dhcp_logs.json b/pipelines/push/syslog/linux/dhcp/dhcp_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/dhcp_logs/dhcp_logs.json rename to pipelines/push/syslog/linux/dhcp/dhcp_logs.json diff --git a/pipelines/community/transform_ocsf/dhcp_logs/metadata.yaml b/pipelines/push/syslog/linux/dhcp/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/dhcp_logs/metadata.yaml rename to pipelines/push/syslog/linux/dhcp/metadata.yaml diff --git a/pipelines/community/transform_ocsf/dhcp_logs/sample.json b/pipelines/push/syslog/linux/dhcp/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/dhcp_logs/sample.json rename to pipelines/push/syslog/linux/dhcp/sample.json diff --git a/pipelines/community/transform_ocsf/dhcp_logs/serializer.lua b/pipelines/push/syslog/linux/dhcp/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/dhcp_logs/serializer.lua rename to pipelines/push/syslog/linux/dhcp/serializer.lua diff --git a/pipelines/community/transform_ocsf/dns_general_logs/dns_general_logs.json b/pipelines/push/syslog/linux/dns_general/dns_general_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/dns_general_logs/dns_general_logs.json rename to pipelines/push/syslog/linux/dns_general/dns_general_logs.json diff --git a/pipelines/community/transform_ocsf/dns_general_logs/metadata.yaml b/pipelines/push/syslog/linux/dns_general/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/dns_general_logs/metadata.yaml rename to pipelines/push/syslog/linux/dns_general/metadata.yaml diff --git a/pipelines/community/transform_ocsf/dns_general_logs/sample.json b/pipelines/push/syslog/linux/dns_general/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/dns_general_logs/sample.json rename to pipelines/push/syslog/linux/dns_general/sample.json diff --git a/pipelines/community/transform_ocsf/dns_general_logs/serializer.lua b/pipelines/push/syslog/linux/dns_general/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/dns_general_logs/serializer.lua rename to pipelines/push/syslog/linux/dns_general/serializer.lua diff --git a/pipelines/community/transform_ocsf/dns_ocsf_logs/dns_ocsf_logs.json b/pipelines/push/syslog/linux/dns_ocsf/dns_ocsf_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/dns_ocsf_logs/dns_ocsf_logs.json rename to pipelines/push/syslog/linux/dns_ocsf/dns_ocsf_logs.json diff --git a/pipelines/community/transform_ocsf/dns_ocsf_logs/metadata.yaml b/pipelines/push/syslog/linux/dns_ocsf/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/dns_ocsf_logs/metadata.yaml rename to pipelines/push/syslog/linux/dns_ocsf/metadata.yaml diff --git a/pipelines/community/transform_ocsf/dns_ocsf_logs/sample.json b/pipelines/push/syslog/linux/dns_ocsf/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/dns_ocsf_logs/sample.json rename to pipelines/push/syslog/linux/dns_ocsf/sample.json diff --git a/pipelines/community/transform_ocsf/dns_ocsf_logs/serializer.lua b/pipelines/push/syslog/linux/dns_ocsf/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/dns_ocsf_logs/serializer.lua rename to pipelines/push/syslog/linux/dns_ocsf/serializer.lua diff --git a/pipelines/community/transform_ocsf/ufw_firewall_logs/metadata.yaml b/pipelines/push/syslog/linux/ufw/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/ufw_firewall_logs/metadata.yaml rename to pipelines/push/syslog/linux/ufw/metadata.yaml diff --git a/pipelines/community/transform_ocsf/ufw_firewall_logs/serializer.lua b/pipelines/push/syslog/linux/ufw/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/ufw_firewall_logs/serializer.lua rename to pipelines/push/syslog/linux/ufw/serializer.lua diff --git a/pipelines/community/transform_ocsf/ufw_firewall_logs/ufw_firewall_logs.json b/pipelines/push/syslog/linux/ufw/ufw_firewall_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/ufw_firewall_logs/ufw_firewall_logs.json rename to pipelines/push/syslog/linux/ufw/ufw_firewall_logs.json diff --git a/pipelines/community/transform_ocsf/managedengine_ad_audit_plus/managedengine_ad_audit_plus.json b/pipelines/push/syslog/manageengine/ad_audit_plus_alt/managedengine_ad_audit_plus.json similarity index 100% rename from pipelines/community/transform_ocsf/managedengine_ad_audit_plus/managedengine_ad_audit_plus.json rename to pipelines/push/syslog/manageengine/ad_audit_plus_alt/managedengine_ad_audit_plus.json diff --git a/pipelines/community/transform_ocsf/managedengine_ad_audit_plus/metadata.yaml b/pipelines/push/syslog/manageengine/ad_audit_plus_alt/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/managedengine_ad_audit_plus/metadata.yaml rename to pipelines/push/syslog/manageengine/ad_audit_plus_alt/metadata.yaml diff --git a/pipelines/community/transform_ocsf/managedengine_ad_audit_plus/sample.json b/pipelines/push/syslog/manageengine/ad_audit_plus_alt/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/managedengine_ad_audit_plus/sample.json rename to pipelines/push/syslog/manageengine/ad_audit_plus_alt/sample.json diff --git a/pipelines/community/transform_ocsf/managedengine_ad_audit_plus/serializer.lua b/pipelines/push/syslog/manageengine/ad_audit_plus_alt/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/managedengine_ad_audit_plus/serializer.lua rename to pipelines/push/syslog/manageengine/ad_audit_plus_alt/serializer.lua diff --git a/pipelines/community/transform_ocsf/manageengine_adauditplus_logs/manageengine_adauditplus_logs.json b/pipelines/push/syslog/manageengine/adauditplus/manageengine_adauditplus_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_adauditplus_logs/manageengine_adauditplus_logs.json rename to pipelines/push/syslog/manageengine/adauditplus/manageengine_adauditplus_logs.json diff --git a/pipelines/community/transform_ocsf/manageengine_adauditplus_logs/metadata.yaml b/pipelines/push/syslog/manageengine/adauditplus/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_adauditplus_logs/metadata.yaml rename to pipelines/push/syslog/manageengine/adauditplus/metadata.yaml diff --git a/pipelines/community/transform_ocsf/manageengine_adauditplus_logs/sample.json b/pipelines/push/syslog/manageengine/adauditplus/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_adauditplus_logs/sample.json rename to pipelines/push/syslog/manageengine/adauditplus/sample.json diff --git a/pipelines/community/transform_ocsf/manageengine_adauditplus_logs/serializer.lua b/pipelines/push/syslog/manageengine/adauditplus/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_adauditplus_logs/serializer.lua rename to pipelines/push/syslog/manageengine/adauditplus/serializer.lua diff --git a/pipelines/community/transform_ocsf/manageengine_general_logs/manageengine_general_logs.json b/pipelines/push/syslog/manageengine/logs/manageengine_general_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_general_logs/manageengine_general_logs.json rename to pipelines/push/syslog/manageengine/logs/manageengine_general_logs.json diff --git a/pipelines/community/transform_ocsf/manageengine_general_logs/metadata.yaml b/pipelines/push/syslog/manageengine/logs/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_general_logs/metadata.yaml rename to pipelines/push/syslog/manageengine/logs/metadata.yaml diff --git a/pipelines/community/transform_ocsf/manageengine_general_logs/sample.json b/pipelines/push/syslog/manageengine/logs/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_general_logs/sample.json rename to pipelines/push/syslog/manageengine/logs/sample.json diff --git a/pipelines/community/transform_ocsf/manageengine_general_logs/serializer.lua b/pipelines/push/syslog/manageengine/logs/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/manageengine_general_logs/serializer.lua rename to pipelines/push/syslog/manageengine/logs/serializer.lua diff --git a/pipelines/community/transform_ocsf/microsoft_activedirectory_logs/metadata.yaml b/pipelines/push/syslog/microsoft/active_directory/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_activedirectory_logs/metadata.yaml rename to pipelines/push/syslog/microsoft/active_directory/metadata.yaml diff --git a/pipelines/community/transform_ocsf/microsoft_activedirectory_logs/microsoft_activedirectory_logs.json b/pipelines/push/syslog/microsoft/active_directory/microsoft_activedirectory_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_activedirectory_logs/microsoft_activedirectory_logs.json rename to pipelines/push/syslog/microsoft/active_directory/microsoft_activedirectory_logs.json diff --git a/pipelines/community/transform_ocsf/microsoft_activedirectory_logs/sample.json b/pipelines/push/syslog/microsoft/active_directory/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_activedirectory_logs/sample.json rename to pipelines/push/syslog/microsoft/active_directory/sample.json diff --git a/pipelines/community/transform_ocsf/microsoft_activedirectory_logs/serializer.lua b/pipelines/push/syslog/microsoft/active_directory/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/microsoft_activedirectory_logs/serializer.lua rename to pipelines/push/syslog/microsoft/active_directory/serializer.lua diff --git a/pipelines/community/transform_ocsf/iis_w3c/iis_w3c.json b/pipelines/push/syslog/microsoft/iis/iis_w3c.json similarity index 100% rename from pipelines/community/transform_ocsf/iis_w3c/iis_w3c.json rename to pipelines/push/syslog/microsoft/iis/iis_w3c.json diff --git a/pipelines/community/transform_ocsf/iis_w3c/metadata.yaml b/pipelines/push/syslog/microsoft/iis/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/iis_w3c/metadata.yaml rename to pipelines/push/syslog/microsoft/iis/metadata.yaml diff --git a/pipelines/community/transform_ocsf/iis_w3c/sample.json b/pipelines/push/syslog/microsoft/iis/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/iis_w3c/sample.json rename to pipelines/push/syslog/microsoft/iis/sample.json diff --git a/pipelines/community/transform_ocsf/iis_w3c/serializer.lua b/pipelines/push/syslog/microsoft/iis/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/iis_w3c/serializer.lua rename to pipelines/push/syslog/microsoft/iis/serializer.lua diff --git a/pipelines/community/transform_ocsf/windows_event_log_logs/metadata.yaml b/pipelines/push/syslog/microsoft/windows_event/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/windows_event_log_logs/metadata.yaml rename to pipelines/push/syslog/microsoft/windows_event/metadata.yaml diff --git a/pipelines/community/transform_ocsf/windows_event_log_logs/sample.json b/pipelines/push/syslog/microsoft/windows_event/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/windows_event_log_logs/sample.json rename to pipelines/push/syslog/microsoft/windows_event/sample.json diff --git a/pipelines/community/transform_ocsf/windows_event_log_logs/serializer.lua b/pipelines/push/syslog/microsoft/windows_event/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/windows_event_log_logs/serializer.lua rename to pipelines/push/syslog/microsoft/windows_event/serializer.lua diff --git a/pipelines/community/transform_ocsf/windows_event_log_logs/windows_event_log_logs.json b/pipelines/push/syslog/microsoft/windows_event/windows_event_log_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/windows_event_log_logs/windows_event_log_logs.json rename to pipelines/push/syslog/microsoft/windows_event/windows_event_log_logs.json diff --git a/pipelines/community/transform_ocsf/nginx_kvlog_logs/metadata.yaml b/pipelines/push/syslog/nginx/access/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/nginx_kvlog_logs/metadata.yaml rename to pipelines/push/syslog/nginx/access/metadata.yaml diff --git a/pipelines/community/transform_ocsf/nginx_kvlog_logs/nginx_kvlog_logs.json b/pipelines/push/syslog/nginx/access/nginx_kvlog_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/nginx_kvlog_logs/nginx_kvlog_logs.json rename to pipelines/push/syslog/nginx/access/nginx_kvlog_logs.json diff --git a/pipelines/community/transform_ocsf/nginx_kvlog_logs/serializer.lua b/pipelines/push/syslog/nginx/access/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/nginx_kvlog_logs/serializer.lua rename to pipelines/push/syslog/nginx/access/serializer.lua diff --git a/pipelines/community/transform_ocsf/nginx_error_logs/metadata.yaml b/pipelines/push/syslog/nginx/error/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/nginx_error_logs/metadata.yaml rename to pipelines/push/syslog/nginx/error/metadata.yaml diff --git a/pipelines/community/transform_ocsf/nginx_error_logs/nginx_error_logs.json b/pipelines/push/syslog/nginx/error/nginx_error_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/nginx_error_logs/nginx_error_logs.json rename to pipelines/push/syslog/nginx/error/nginx_error_logs.json diff --git a/pipelines/community/transform_ocsf/nginx_error_logs/serializer.lua b/pipelines/push/syslog/nginx/error/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/nginx_error_logs/serializer.lua rename to pipelines/push/syslog/nginx/error/serializer.lua diff --git a/pipelines/community/transform_ocsf/paloalto_vpn_logs/metadata.yaml b/pipelines/push/syslog/palo_alto/globalprotect/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_vpn_logs/metadata.yaml rename to pipelines/push/syslog/palo_alto/globalprotect/metadata.yaml diff --git a/pipelines/community/transform_ocsf/paloalto_vpn_logs/paloalto_vpn_logs.json b/pipelines/push/syslog/palo_alto/globalprotect/paloalto_vpn_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_vpn_logs/paloalto_vpn_logs.json rename to pipelines/push/syslog/palo_alto/globalprotect/paloalto_vpn_logs.json diff --git a/pipelines/community/transform_ocsf/paloalto_vpn_logs/sample.json b/pipelines/push/syslog/palo_alto/globalprotect/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_vpn_logs/sample.json rename to pipelines/push/syslog/palo_alto/globalprotect/sample.json diff --git a/pipelines/community/transform_ocsf/paloalto_vpn_logs/serializer.lua b/pipelines/push/syslog/palo_alto/globalprotect/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_vpn_logs/serializer.lua rename to pipelines/push/syslog/palo_alto/globalprotect/serializer.lua diff --git a/pipelines/community/transform_ocsf/paloalto_logs/metadata.yaml b/pipelines/push/syslog/palo_alto/panos/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_logs/metadata.yaml rename to pipelines/push/syslog/palo_alto/panos/metadata.yaml diff --git a/pipelines/community/transform_ocsf/paloalto_logs/paloalto_logs.json b/pipelines/push/syslog/palo_alto/panos/paloalto_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_logs/paloalto_logs.json rename to pipelines/push/syslog/palo_alto/panos/paloalto_logs.json diff --git a/pipelines/community/transform_ocsf/paloalto_logs/sample.json b/pipelines/push/syslog/palo_alto/panos/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_logs/sample.json rename to pipelines/push/syslog/palo_alto/panos/sample.json diff --git a/pipelines/community/transform_ocsf/paloalto_logs/serializer.lua b/pipelines/push/syslog/palo_alto/panos/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_logs/serializer.lua rename to pipelines/push/syslog/palo_alto/panos/serializer.lua diff --git a/pipelines/community/transform_ocsf/paloalto_alternate_logs/metadata.yaml b/pipelines/push/syslog/palo_alto/panos_alt/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_alternate_logs/metadata.yaml rename to pipelines/push/syslog/palo_alto/panos_alt/metadata.yaml diff --git a/pipelines/community/transform_ocsf/paloalto_alternate_logs/paloalto_alternate_logs.json b/pipelines/push/syslog/palo_alto/panos_alt/paloalto_alternate_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_alternate_logs/paloalto_alternate_logs.json rename to pipelines/push/syslog/palo_alto/panos_alt/paloalto_alternate_logs.json diff --git a/pipelines/community/transform_ocsf/paloalto_alternate_logs/sample.json b/pipelines/push/syslog/palo_alto/panos_alt/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_alternate_logs/sample.json rename to pipelines/push/syslog/palo_alto/panos_alt/sample.json diff --git a/pipelines/community/transform_ocsf/paloalto_alternate_logs/serializer.lua b/pipelines/push/syslog/palo_alto/panos_alt/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/paloalto_alternate_logs/serializer.lua rename to pipelines/push/syslog/palo_alto/panos_alt/serializer.lua diff --git a/pipelines/community/transform_ocsf/pfsense_firewall_logs/metadata.yaml b/pipelines/push/syslog/pfsense/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/pfsense_firewall_logs/metadata.yaml rename to pipelines/push/syslog/pfsense/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/pfsense_firewall_logs/pfsense_firewall_logs.json b/pipelines/push/syslog/pfsense/firewall/pfsense_firewall_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/pfsense_firewall_logs/pfsense_firewall_logs.json rename to pipelines/push/syslog/pfsense/firewall/pfsense_firewall_logs.json diff --git a/pipelines/community/transform_ocsf/pfsense_firewall_logs/sample.json b/pipelines/push/syslog/pfsense/firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/pfsense_firewall_logs/sample.json rename to pipelines/push/syslog/pfsense/firewall/sample.json diff --git a/pipelines/community/transform_ocsf/pfsense_firewall_logs/serializer.lua b/pipelines/push/syslog/pfsense/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/pfsense_firewall_logs/serializer.lua rename to pipelines/push/syslog/pfsense/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/sonicwall_firewall_logs/metadata.yaml b/pipelines/push/syslog/sonicwall/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/sonicwall_firewall_logs/metadata.yaml rename to pipelines/push/syslog/sonicwall/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/sonicwall_firewall_logs/sample.json b/pipelines/push/syslog/sonicwall/firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/sonicwall_firewall_logs/sample.json rename to pipelines/push/syslog/sonicwall/firewall/sample.json diff --git a/pipelines/community/transform_ocsf/sonicwall_firewall_logs/serializer.lua b/pipelines/push/syslog/sonicwall/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/sonicwall_firewall_logs/serializer.lua rename to pipelines/push/syslog/sonicwall/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/sonicwall_firewall_logs/sonicwall_firewall_logs.json b/pipelines/push/syslog/sonicwall/firewall/sonicwall_firewall_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/sonicwall_firewall_logs/sonicwall_firewall_logs.json rename to pipelines/push/syslog/sonicwall/firewall/sonicwall_firewall_logs.json diff --git a/pipelines/community/transform_ocsf/squid_proxy_logs/metadata.yaml b/pipelines/push/syslog/squid/proxy/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/squid_proxy_logs/metadata.yaml rename to pipelines/push/syslog/squid/proxy/metadata.yaml diff --git a/pipelines/community/transform_ocsf/squid_proxy_logs/serializer.lua b/pipelines/push/syslog/squid/proxy/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/squid_proxy_logs/serializer.lua rename to pipelines/push/syslog/squid/proxy/serializer.lua diff --git a/pipelines/community/transform_ocsf/squid_proxy_logs/squid_proxy_logs.json b/pipelines/push/syslog/squid/proxy/squid_proxy_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/squid_proxy_logs/squid_proxy_logs.json rename to pipelines/push/syslog/squid/proxy/squid_proxy_logs.json diff --git a/pipelines/community/transform_ocsf/vcenter_logs/metadata.yaml b/pipelines/push/syslog/vmware/vcenter/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/vcenter_logs/metadata.yaml rename to pipelines/push/syslog/vmware/vcenter/metadata.yaml diff --git a/pipelines/community/transform_ocsf/vcenter_logs/sample.json b/pipelines/push/syslog/vmware/vcenter/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/vcenter_logs/sample.json rename to pipelines/push/syslog/vmware/vcenter/sample.json diff --git a/pipelines/community/transform_ocsf/vcenter_logs/serializer.lua b/pipelines/push/syslog/vmware/vcenter/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/vcenter_logs/serializer.lua rename to pipelines/push/syslog/vmware/vcenter/serializer.lua diff --git a/pipelines/community/transform_ocsf/vcenter_logs/vcenter_logs.json b/pipelines/push/syslog/vmware/vcenter/vcenter_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/vcenter_logs/vcenter_logs.json rename to pipelines/push/syslog/vmware/vcenter/vcenter_logs.json diff --git a/pipelines/community/transform_ocsf/vmware_vcenter_logs/metadata.yaml b/pipelines/push/syslog/vmware/vcenter_v2/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/vmware_vcenter_logs/metadata.yaml rename to pipelines/push/syslog/vmware/vcenter_v2/metadata.yaml diff --git a/pipelines/community/transform_ocsf/vmware_vcenter_logs/sample.json b/pipelines/push/syslog/vmware/vcenter_v2/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/vmware_vcenter_logs/sample.json rename to pipelines/push/syslog/vmware/vcenter_v2/sample.json diff --git a/pipelines/community/transform_ocsf/vmware_vcenter_logs/serializer.lua b/pipelines/push/syslog/vmware/vcenter_v2/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/vmware_vcenter_logs/serializer.lua rename to pipelines/push/syslog/vmware/vcenter_v2/serializer.lua diff --git a/pipelines/community/transform_ocsf/vmware_vcenter_logs/vmware_vcenter_logs.json b/pipelines/push/syslog/vmware/vcenter_v2/vmware_vcenter_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/vmware_vcenter_logs/vmware_vcenter_logs.json rename to pipelines/push/syslog/vmware/vcenter_v2/vmware_vcenter_logs.json diff --git a/pipelines/community/transform_ocsf/watchguard_firewall_logs/metadata.yaml b/pipelines/push/syslog/watchguard/firewall/metadata.yaml similarity index 100% rename from pipelines/community/transform_ocsf/watchguard_firewall_logs/metadata.yaml rename to pipelines/push/syslog/watchguard/firewall/metadata.yaml diff --git a/pipelines/community/transform_ocsf/watchguard_firewall_logs/sample.json b/pipelines/push/syslog/watchguard/firewall/sample.json similarity index 100% rename from pipelines/community/transform_ocsf/watchguard_firewall_logs/sample.json rename to pipelines/push/syslog/watchguard/firewall/sample.json diff --git a/pipelines/community/transform_ocsf/watchguard_firewall_logs/serializer.lua b/pipelines/push/syslog/watchguard/firewall/serializer.lua similarity index 100% rename from pipelines/community/transform_ocsf/watchguard_firewall_logs/serializer.lua rename to pipelines/push/syslog/watchguard/firewall/serializer.lua diff --git a/pipelines/community/transform_ocsf/watchguard_firewall_logs/watchguard_firewall_logs.json b/pipelines/push/syslog/watchguard/firewall/watchguard_firewall_logs.json similarity index 100% rename from pipelines/community/transform_ocsf/watchguard_firewall_logs/watchguard_firewall_logs.json rename to pipelines/push/syslog/watchguard/firewall/watchguard_firewall_logs.json From fa3980bebc8c1c807ea7c41c5e360e15db4c4c60 Mon Sep 17 00:00:00 2001 From: Nate Smalley Date: Sun, 26 Apr 2026 22:21:25 -0700 Subject: [PATCH 2/2] CHANGELOG: 91 transform_ocsf entries migrated into push/pull/ taxonomy Co-Authored-By: Claude Opus 4.7 (1M context) --- CHANGELOG.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a7eaf32..254dd23 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -51,6 +51,26 @@ The three remaining PAN-OS OCSF transforms in and the field-name convention each expects, so users can choose between them without reading the Lua. No serializer logic changes. +### Changed - migrated 91 community pipelines into push/pull/ taxonomy + +The empty scaffolding under `pipelines/push/{syslog,hec}/` and +`pipelines/pull/{api,object_store}/` introduced in this release is now +populated. 91 community pipelines have moved out of +`pipelines/community/transform_ocsf/` and into ingest-mode-first paths: + +- 57 entries → `pipelines/push/syslog///` +- 29 entries → `pipelines/pull/api///` +- 5 entries → `pipelines/pull/object_store///` + +The bucket is determined by each entry's `ingest_mode` field. Git history is +preserved on every entry (`git mv`). No serializer logic, metadata content, +or pipeline JSON content changed; every change is a directory rename. + +15 entries remain in `pipelines/community/transform_ocsf/` as platform- +agnostic OCSF overlays for generic / template / unknown-vendor data +(`agent_metrics_logs`, `generic_access_logs`, `json_generic_logs`, +`sample_test_logs`, etc.). + ## [1.3.0] - 2025-10-28 ### Added