This topic provides a description of the configurable options for a Log Decoder in the Parser Mappings tab.
In the Parser Mappings Administrators can configure log parser mappings for Log Decoder services. To access the Parser Mappings tab, go to (Admin) > Services > select a Log Decoder service and click > View > Config > Parser Mappings tab.
Note: You can also configure log parser mappings for Log Decoder services by navigating to Admin > Services > Event Sources > Discovery.
This feature is intended to track a subset of event sources that is parsing against the wrong parser.
What do you want to do?
|I want to...||Documentation|
|Administrator||Manage IPs for Event Source Mapping.||Enable Parser Mappings|
This is an example of the tab.
|1||Parser Mappings Toolbar - Provides options to work with parser mappings in the list|
|2||Parser Mappings List - Lists all parsers that are currently mapped on the Log Decoder|
Parser Mappings Toolbar
The Parser Mappings toolbar has options to work with parser mappings in the grid.
|Add a parser mapping.|
|Delete the selected parser mapping.|
|Edit a parser mapping.|
|Refresh the list of parser mappings.|
|Display the Actions menu. |
Parser Mappings List
The Parser Mappings list displays all parsers that are currently mapped on the Log Decoder.
|Host||Displays the IP address of the host.|
|Event Source||Displays the event sources that are parsing incorrectly.|
Parser Mappings Editor Dialog
The Parser Mappings Editor dialog allows you to update an IP to event source mapping.
To access the Parser Mappings Editor dialog, in the Services Config view for a Log Decoder, select the Parser Mappings tab.