Should add a CEF output to inject data in Arcsight. Have code here https://github.com/juju4/combine/tree/dev but still need more testing