on Dec 8, 2015For those people that have created their own custom parsers.
Do you have a tutorial or way for someone that is new to creating parsers to be able to create some?
For those people that have created their own custom parsers.
Do you have a tutorial or way for someone that is new to creating parsers to be able to create some?
If you are looking at custom Lua parsers, the Parsers book (located here: Parsers Book.zip) is required reading. It provides some guidance on how to build your own.
I also put together a Lua template to help as well.
Also have a look at this guide:
David's document is the best starting point.
You'll need to manually extract the *msg.xml and *.ini file from the ESI generated parser, and also modify the XML to specify device="2.0". There are lots of other gotchas including understanding the mapping from EnVision key names to SA metanames, what's indexed.
There are also some online learning course on the Event Source Integration Tool.
The course code is:
RSA-ENVESI
This is a free e-learning course you just need to register.
https://edu.corp.emc.com/search/widgets_template1.aspx
If you have any problems accessing to content then Education Service can assist. You can contact them at
http://emc.force.com/EducationSupport
I also attach the documentation for the Event Source Integration Tool and also the latest BETA ESI Tool which describes more about how parsers are created.
If you are looking at custom Lua parsers, the Parsers book (located here: Parsers Book.zip) is required reading. It provides some guidance on how to build your own.
I also put together a Lua template to help as well.