Add or Update Supported Event Source Log Parsers
DOC 43427 says
In the Live Matching Resources toolbar, click Package > Create
However, I am logged into RSA Live and I do not see a Package button in my window as shown in DOC 43427. I cannot selected multiple files and create a package.
You might have an issue with your Live setup. As far as I know, you should be able to select multiple items, and you should see the Package button (I've attached an image from a 10.6.3 system).
Can you tell me which version of Security Analytics you are using? And maybe you can check your Live setup?
We are on 10.6.2.1, but our production NW is air gapped from the Internet.