Topics:

• Collectors, parsers, filters

• Data pipeline overview

• Log ingestion flow

Topics:

• How parsers work

• Field extraction

• Sample parsing rules

Topics:

• Use case lifecycle

• Building meaningful alerts

• Threshold & pattern logic

Activities:

• Quiz

• SIEM tuning checklist