Manage Parsers

Security Requirements and Controls

The Parsers Interface displays all repository parsers in a table format. This table includes both built-in parsers and any parsers you create.

You can manage multiple parsers without opening them one by one. Select one or more parsers with the checkboxes → click Actions to either delete the parsers or export them as .zip file:

Screenshot showing the available parsers in a specific repository and the actions you can perform in bulk

Figure 71. Repository parsers


You can further manage a specific parser at row table level by clicking the ⋮ menu icon next to a parser:

Screenshot showing how to manage a single parser

Figure 72. Manage a single parser


Available options are:

  • Duplicate creates a copy of the parser

  • Export as template exports the parser in .yaml format

  • Query parsed events opens the query search to quickly view all events parsed by a specific parser, for example #type=accesslog

  • Query parsed errors opens the query search to view parsing errors by a specific parser for troubleshooting, for example #type=accesslog | @error=*