whitelist CEF fields, correct syslog facility, unicode and lowercase the keys
whitelist CEF fields, correct syslog facility, unicode and lowercase the keys

jeffbryner/MozDef,eXcomm/MozDef,netantho/MozDef,jeffbryner/MozDef,gdestuynder/MozDef,DarkPrince304/MozDef,gdestuynder/MozDef,netantho/MozDef,DarkPrince304/MozDef,serbyy/MozDef,mozilla/MozDef,jeffbryner/MozDef,ameihm0912/MozDef,triplekill/MozDef,abhijithch/MozDef,ameihm0912/MozDef,netantho/MozDef,triplekill/MozDef,jeffbryner/MozDef,526avijitgupta/MozDef,abhijithch/MozDef,abhijithch/MozDef,Phrozyn/MozDef,gsssrao/MozDef,526avijitgupta/MozDef,mozilla/MozDef,gdestuynder/MozDef,gsssrao/MozDef,mpurzynski/MozDef,abhijithch/MozDef,ameihm0912/MozDef,Phrozyn/MozDef,serbyy/MozDef,serbyy/MozDef,jvehent/MozDef,gsssrao/MozDef,jvehent/MozDef,Phrozyn/MozDef,eXcomm/MozDef,mozilla/MozDef,eXcomm/MozDef,mozilla/MozDef,gdestuynder/MozDef,DarkPrince304/MozDef,mpurzynski/MozDef,netantho/MozDef,jvehent/MozDef,triplekill/MozDef,mpurzynski/MozDef,serbyy/MozDef,jvehent/MozDef,mpurzynski/MozDef,gsssrao/MozDef,DarkPrince304/MozDef,526avijitgupta/MozDef,Phrozyn/MozDef,eXcomm/MozDef,526avijitgupta/MozDef,triplekill/MozDef,ameihm0912/MozDef