Google SecOps SIEM Adds Unroll Processor for Data Processing Pipelines
Google SecOps SIEM data processing pipelines now include an Unroll processor designed to split log entries containing event arrays into multiple individual log events. This new capability enhances data ingestion by automatically expanding complex structured log data prior to parsing and ingestion. The Unroll processor requires structured data inputs, so raw string payloads must first be pre-parsed using a Transform processor in the pipeline. This feature primarily benefits security engineers managing high volumes of nested log data within Google SecOps.
Features (1) ›
- Google SecOps SIEM Unroll Processor for Data Processing Pipelines
Unroll Processor for Data Processing Pipelines Google SecOps data processing pipelines now support the Unroll processor (event breaking). This processor allows you to split log entries containing arrays or slices of events into multiple individual log events prior to parsing and ingestion. Key details: Event Breaking Capability: Automatically expands log arrays into discrete log events. Pre-parsing Requirement: The Unroll processor requires structured data inputs. Raw string payloads must first be parsed using a Transform processor (e.g., set(body, ParseJSON(body)) ) positioned prior to the Un
https://docs.cloud.google.com/release-notes#August_24_2026
Related releases
- Bringing gVisor Sandboxes to Distributed Ray Clusters on Google Cloud Google Cloud Blog ·
- Introducing Gemini Enterprise for Financial Services Google Cloud Blog ·
- Google Cloud Introduces Gemini Enterprise for Legal AI Solution Google Cloud Blog ·
- Anthos Config Management gets security updates and monitoring controls Google Cloud release notes ·
- Container Optimized OS Updates Address Linux Kernel Vulnerabilities and Package Upgrades Google Cloud release notes ·
- Cloud Storage Rapid Cache adds prefix-level ingest-on-write filtering Google Cloud release notes ·