SIEM - Normalise data
(
)
Event normalisation consists of breaking each field of a raw event into variables and combining them into views that are relevant.