Use these resources to understand the structure of Corelight and Zeek logs:


Corelight Log Cheet Sheet (PDF)

Zeek Log Documentation (Read The Docs)