- Exabeam Auto Parser Generator
- Create a Custom Parser Using Auto Parser Generator
- Duplicate a Parser Using Auto Parser Generator
- Import a Custom Parser Into Auto Parser Generator
- Edit a Custom Parser in Auto Parser Generator
- Delete a Custom Parser In Auto Parser Generator
- Tokenize Non-Standard Log Files
- Event Types in Custom Parsers
- What's New in Auto Parser Generator
Import a Custom Parser Into Auto Parser Generator
Use these instructions to import an existing custom parser and event builder. This allows you to view and manage all your parsers in one place and edit your custom parsers using Auto Parser Generator.
On the Parsers page, click Import Parser
.The Import Parser dialog appears.
Choose which type of parser you are importing:
Advanced Analytics + Data Lake Parser
Data Lake Parser
Click Select File, then upload a ZIP or GZIP file containing your parsers and event builders. These files must follow certain requirements:
The ZIP of GZIP file must be no more than 500 MB.
Your parsers and event builders must be in HOCON format.
The parser file must be named
parser.conf. You can include multiple parsers in this file.The event builder file must be named
event_builder.conf. You can include multiple event builders in this file.
Note
If the file(s) you are attempting to import do not conform to the requirements, you will see a message listing the errors and you will be unable to import the parsers.
Click Import <#> parsers. The parser appears in the list of custom parsers, under the In Progress tab. Now, you can edit the parser in Auto Parser Generator.