- Log Stream Overview
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for Extraction Conditions
- Array Log Sample
- Extract Fields Using Regular Expressions
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Live Tail
PrevNext
Review the Matching JSON Fields and Values
In the Sample Log Lines section below the JSON Path Expressions table, the values that match the mapped fields are highlighted. Carefully review the values that match the mapped fields for each log.
To view the fields that have a matching value in every log, click the Matches tab.
To view the fields that don't have a matching value in every log, click the Non-matches tab.
When you're satisfied with the extracted fields, click Validate & next. The Add Event Builder Rules page opens.