This topic introduces the features of the Services Config View > Parsers tab.
In the Services Config view > Parsers tab, you can view deployed parsers on a Decoder, upload parsers, and delete deployed parsers. Parsers can be added and removed while a Decoder is running without affecting capture. Refer to Configure Feeds and Parsers for a general introduction to the use of parsers on Decoders.
Note: Unless otherwise stated, any reference to Decoders applies to Log Decoders as well.
You can access this view by doing the following:
- In the Security Analytics menu, select Administration > Services.
- Select a service and >View > Config.
The Config view for the selected service is displayed.
- Click the Parsers tab
This is an example of the Parsers tab.
The Parser Grid lists all parsers that are currently deployed on the Decoder. The Parser Tab Toolbar has options to work with parsers in the grid.
Parsers Tab Toolbar
|Enables you to upload parsers to a Decoder or Log Decoder.|
|Requests confirmation that you want to delete the selected parsers. You can select No to cancel the deletion or select Yes to delete the selected parsers.|
The Parser Grid provides a listing of all currently deployed parsers for the Decoder.
|Name||The name of the parser or the parser file.|
|Live||Indicates if the parser originated from Live. Possible values are Yes, No, or N/A. |
|Date Installed||The date the parser was pushed to the service.|