Universal Log Pre-processing Framework

Source summary

Build a lossless, vendor-neutral log-preprocessing framework, with current scope limited to perimeter-network-device events despite the broader long-term vision. Preserve complete raw events and traceability while parsing attributes into a common taxonomy for SIEM/data-lake use. Support plug-in onboarding, high-volume scaling and air-gapped deployment; container packaging is optional. AI-ready outputs do not themselves require an AI model. Deliver source/setup instructions and short architecture/demo/presentation artefacts.