Decoder: Decoder: Services Config View - Parser Mappings Tab (Beta)

Document created by RSA Information Design and Development on Jul 26, 2016Last modified by RSA Information Design and Development on Sep 28, 2016
Version 4Show Document
  • View in full screen mode
 

This topic provides a description of the configurable options for a Log Decoder in the Parsers Mappings tab.

In the Parsers Mappings tab, Administrators can configure log parser mappings for Log Decoder services. This feature is intended to track a subset of of Event Sources that is parsing against the wrong parser. The Parser Mappings tab must be enabled before you can see it in the Services Config view.

Procedures associated with the Parser Mappings tab are provided in (For 10.5.1.1 or later) Access Parser Mappings.

To access this tab:

  1. In the Security Analytics menu, select Administration > Services.
  2. Select a service and Actions menu cropped >View > Config.
    The Config view for the selected service is displayed.
  3. Click the Parsers Mapping tab.

This is an example of the tab.

Features

The Parser Grid lists all parsers that are currently mapped on the Log Decoder. The Parser Tab Toolbar has options to work with parser mappings in the grid.

Parser Mappings Toolbar

The Parser Mappings Toolbar has options to work with parser mappings in the grid.

                                 
FeatureDescription
Icon-Add.png Add a parser mapping.
ic-delete.png Delete the selected parser mapping.
ic-edit.png Edit a parser mapping.
ic-refresh.png Refresh the list of parser mappings.
Display the Actions menu.
  • Import - Import a parser mapping to a file.
  • Export - Save a parser mapping to a file.
  

Parser Mappings Grid

The Parser Mappings grid lists all parsers that are currently mapped on the Log Decoder.

                     
ParameterDescription
Host Displays the IP address of the host.
Event Source

Displays the Event Sources that are parsing incorrectly.

  
You are here: References > Services Config View - Parser Mappings Tab (Beta)

Attachments

    Outcomes