Introduction
Learn about the OCSF Mapping App, its architecture, and how it works with ZephFlow to transform security logs into the OCSF format.
MCP Server
The OCSF Mapping App MCP server enables programmatic access to mapping creation, log segregation, transformation, and validation capabilities through a comprehensive set of tools for automated log nor
Using Templates
Templates provide pre-configured mappings for common log sources like AWS CloudTrail and Cisco ASA, allowing you to quickly create and customize mappings without building from scratch.
Mapping JSON Logs
Map structured JSON logs to OCSF format using the OCSF Mapping App with AI-assisted rule generation and dual editing modes for both visual configuration and direct expression editing.
Mapping Non-JSON Logs
Create OCSF mappings from non-JSON logs like syslog, Apache/Nginx logs, and firewall logs by manually configuring or AI-generating parser chains that extract structured data from unstructured text.