Manage Parsers

Security Requirements and Controls

The Parsers Interface displays all repository parsers in a table format. This table includes both built-in parsers and any parsers you create.

You can manage multiple parsers without opening them one by one. Select one or more parsers with the checkboxes → click Actions to either delete the parsers or export them as .zip file:

Screenshot of the Parsers table with multiple parsers selected via checkboxes and an Actions dropdown menu showing bulk delete and export options

Figure 53. Repository parsers


You can further manage a specific parser at row table level by clicking the â‹® menu icon next to a parser:

Screenshot showing a parser table row with the ellipsis menu icon expanded to display single parser management options including Duplicate, Export, and Delete

Figure 54. Manage a single parser


Available options are:

  • Duplicate creates a copy of the parser

  • Export as template exports the parser in .yaml format

  • Query parsed events opens the query search to quickly view all events parsed by a specific parser, for example #type=accesslog

  • Query parsed errors opens the query search to view parsing errors by a specific parser for troubleshooting, for example #type=accesslog | @error=*