SA Cfg: Log Parser Mappings (Beta) Panel

Document created by RSA Information Design and Development on Apr 25, 2016Last modified by RSA Information Design and Development on Dec 2, 2016
Version 3Show Document
  • View in full screen mode
  

This topic introduces the features of the Administration > System > Log Parser Mappings panel, which allows Administrators to enable the Log Parser Mapping feature so that Administrators can configure log parser mappings for Log Decoder services. This feature is intended to track a subset of of Event Sources that is parsing against the wrong parser.

Procedures associated with the Log Parser Mappings panel are provided in "Enable Event Source Mapping" in the Decoder and Log Decoder Configuration Guide.

To access the Log Parser Mappings panel:

  1. In the Security Analytics menu, select Administration > System.
  2. In the options panel, select Log Parser Mappings.
  3. Select the Enable Parser Mappings checkbox to enable log parser mappings and click Apply.

    PrsMapEnable.png

The Parser Mapping (Beta) tab is now enabled in the Services Config view.
PrsMapTbBeta.png

Features 


The Log Parser Mapping panel has the following features. 

                 
FeatureDescription
Enable Parser MappingsAdd a parser mapping.
ApplyApplies the change to enable or disable the Parser Mapping feature.
You are here
Table of Contents > References > Log Parser Mappings (Beta Panel

Attachments

    Outcomes