- Log Stream Overview
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for Extraction Conditions
- Array Log Sample
- Extract Fields Using Regular Expressions
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Live Tail
Export Custom Parsers
Use the export functionality to download a custom parser to your local computer. The resulting file can then be imported into other deployments.
To export a custom parser:
Click the
icon in the header row to select all parsers, or on individual rows to select one or multiple parsers.Note
There are several ways to export a single parser:
Click the
menu on the parser you wish to export, and then select Export.From the Parser Details screen click
.
The Export Parsers and Event Builders dialog displays.
Specify a name for your downloaded file and click Export.
Note
Select Matching filters to export all parsers in the current view, instead of just the selected parser(s). Select All parsers to export all parsers in the system.
The export file is compressed and downloaded to your local computer, The compressed file contains the following files:
parser.com - Contains all of the parser details and all the custom and default fields extracted by the parser.
event_builder.conf - Contains the events created by the parser.
field_datatype.json - This file contains all of the custom fields extracted by the parser.
You will receive a notification once the export is complete.
