- Log Stream Overview
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for Extraction Conditions
- Array Log Sample
- Extract Fields Using Regular Expressions
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Live Tail
Duplicate a Parser
Duplicate a default or custom parser to create your own version. This allows you to modify an existing parser to your own needs, streamlining the creation process.
Feel free to pause your work at any time. Your progress will be saved after each step and after you make any changes. If you leave while creating a parser, the incomplete parser appears in the list of parsers with a status of Draft. To pick up where you left off, edit the parser.
On the Parsers Overview tab of the Log Stream home page, click the
menu on an existing custom or default parser and then select Duplicate.The parser will be duplicated and automatically named originalparsername-custom.
Use the Next and Back keys to navigate through the parser creation steps, updating the parser attributes as desired.
After you have edited the parser to your satisfaction, navigate to the Review & Save Parser page.
Click Finish.