Send events in uncompressed format using Ingestion API

Hi Team, 

I am trying to send data to SecOps in UDM format using the Ingestion API. After sending the data, the rawevent  field shows some gibberish values instead of the actual rawevent (my JSON UDM payload). This might be due to compression ? . How can I ingest the data in UDM while keeping the rawevent field intact?

yashdatabahn_0-1727416754221.png

 

Thanks in advance

0 1 141
1 REPLY 1