This topic provides a description of the configurable options for a Log Decoder in the Parser Mappings tab.
In the Parser Mappings Administrators can configure log parser mappings for Log Decoder services. To access the Parser Mappings tab, go to ADMIN > Services > select a service and click > View > Config > Parser Mappings tab.
This feature is intended to track a subset of Event Sources that is parsing against the wrong parser.
What do you want to do?
This is an example of the tab.
|1||Parser Mappings Toolbar - Provides options to work with parser mappings in the grid|
|2||Parser Mappings Grid - Lists all parsers that are currently mapped on the Log Decoder|
Parser Mappings Toolbar
The Parser Mappings toolbar has options to work with parser mappings in the grid.
Parser Mappings List
The Parser Mappings list displays all parsers that are currently mapped on the Log Decoder.
Parser Mappings Editor Dialog
The Parser Mappings Editor dialog allows you to update an IP to event source mapping.
To access the Parser Mappings Editor dialog, follow these steps:
- In the NetWitness Suite menu, select ADMIN > Services.
- Select a Log Decoder, and in the Actions column, select > View > Config.
The Services Config view is displayed.
- Select the Parser Mappings tab.
The Mapping Editor dialog is displayed.
For more information on the Parser Mapping Editor dialog, refer to Enable Parser Mappings.