Is anyone can help me out how the xml log parsing works in SA? I would like to learn and understand how xml works in SA - creation,modification of parsers. I have checked in sadocs but couldnt help me.
It could be appreciable if any one sent me any links regarding xml log parsing.
Can anyone explain how we will write XML parsers?
For example when i worked for Arcsight Flex Parser first ill go with analyzing events,Regex Creation,Tokens,Patterns Concepts and finally deployment likewise how we will write XML parser here?
when i checked in above docs i couldnt find xml parsing concept.My queries are:
1.After analyzing raw events how we will make them to Header and message part in XML
Hope this could clear and im eagerly waiting for your valuable comments.
Oh dear. Then the best course of action is to sign up for the course that I outlined in Custom Parsers .
There are also some online learning course on the Event Source Integration Tool.
The course code is:
This is a free e-learning course you just need to register.
If you have any problems accessing to content then Education Service can assist. You can contact them at