Update kypo_data_preprocessor.py

        'level': [],

        }

    for event in events:

        # this parser deals with multiple data structures of

        # training events

        # if 'message' not in event['_source']:

            # event = event['_source']['message']

            # print(re.search(r'"sandbox_id":(\d*)', event).group(1))

            # cols['sandbox_id'].append(re.search(r'"sandbox_id":(\d*)',

            #         event).group(1))

            # cols['timestamp'].append(re.search(r'"@timestamp":(\s*)',

            #         event).group(1))

            # cols['event_type'].append(re.search(r'"type":(\s*)',

            #         event).group(1).split('.')[-1])

            # cols['level'].append(re.search(r'"phase_id":(\d*)',

            #                      event).group(1))

        if 'message' not in event['_source']:

            cols['sandbox_id'].append(event['_source']['sandbox_id'])

            cols['timestamp'].append(event['_source']['syslog'