Abstract
Map your Cortex XSIAM logs into a single, unified data model with a consolidated schema.
Data modeling rules enable you to map your logs into a single, unified data model. This data model provides a consolidated schema and a simpler way to interact with your data, regardless of its source or dataset.