Glossary: Logs and Data Sources for Investigations

eve.json

Also written: EVE JSON

Suricata's detailed event log. It holds one JSON record per line with named fields, which is the form a SIEM reads.