https://help.splunk.com/en/splunk-cloud-platform/process-data-at-the-edge/use-edge-processors-for-splunk-cloud-platform/process-data-using-pipelines/convert-data-to-ocsf-format-using-an-edge-processor/ocsf-data-conversion-process
OCSF data conversion process | Splunk Cloud Platform (last updated 2026-04-24T16:38:44.322Z)
The Edge Processor parses the incoming data, detects its event type, and then maps the data to an OCSF schema.
data conversion processcloud platformlast updatedsplunk