is it possible to determine which fields are sent from heavy forwarder to another system
i'm asking this because i have problem in TrendMicro can't be readable(logs) from qradar .