CEF Parser Search Command

CEF Formatted fields/data Parser as a Splunk Search Command. It will extract CEF Headers and other extended fields from the event in Splunk. It will be used on any field at the search time in a search query. You can extract fields with simple search command as this in your query. | cefparser field="cef_data"