UnsavedParser is a datatype for the contents of a parser yaml template in structured form. The parser needs to be persisted before it can be deployed. It's used by the generateParserFromTemplate() query field.

Table: UnsavedParser

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Apr 2, 2025
descriptionstring  Long-TermA description of the parser.
fieldsToBeRemovedBeforeParsing[string]yes Long-TermA list of fields that will be removed from the event before it's parsed. These fields aren't included om usage calculation.
fieldsToTag[string]yes Long-TermA list of fields that are used as tags.
namestringyes Long-TermThe name of the unsaved parser.
scriptstringyes Long-TermThe parser script that is executed for each incoming event.
testCases[ParserTestCase]yes Long-TermTest cases that can be used to help verify that the parser works as expected. See ParserTestCase.