Assigning Parsers to Ingest Tokens

Security Requirements and Controls

When you send data to LogScale, you must specify which repository you want to store the data in, and which parser to use for ingesting the data. The best way of doing this is to assign a specific parser to the Ingest Token used to authenticate the client because it allows you to change the parser without changing the client.

Changing the Assigned Parser for an Ingest Token

To change the assigned parser in the Web UI, go to the parser you wish to assign. Then go to SettingsIngest Tokens and click Assign on the token that is used by the clients in question.

You can edit the parser assigned to a token by editing a token.

  1. Select a repository from the Repositories and views page and click Settings on the menu.

  2. To edit a token, click Ingest tokens under Ingest.

    Editing an Existing Token

    Figure 46. Editing an Existing Token

  3. Click the three dots icon next the token you want to edit and click Edit token. Editing the token allows you to modify the assigned parser. For more information, see Ingest Tokens. Once you have made the required changes click Save.