Can
1. convert logs to json using rules directly through the configuration file?
2. if it doesn"t work, can I use a custom script to input it as a log and output as a json conversion?

did not find this information, ask for help, thank you!