- Log Stream Overview
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for Extraction Conditions
- Array Log Sample
- Extract Fields Using Regular Expressions
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Live Tail
Import a Custom Parser
Use these instructions to import an existing custom parser and event builder. This allows you to view, manage, and edit all your parsers in one place.
On the Parsers Overview tab of the Log Stream home page, click Import.
The Import Parser dialog appears.
Click Select File, then upload a ZIP or GZIP file containing your parsers and event builders. These files must follow certain requirements:
The ZIP of GZIP file must be no more than 500 MB.
Your parsers and event builders must be in HOCON format.
The parser file must be named
parsers.conf. You can include multiple parsers in this file.The event builder file must be named
event_builder.conf. You can include multiple event builders in this file.
Note
If the file(s) you are attempting to import do not conform to the requirements, you will see a message listing the errors and you will be unable to import the parsers.
Click Import Parsers.
Click Ok to enable the imported parsers.
The parser appears in the list of custom parsers.