Custom Parsers

[RSAAdmin]

For those people that have created their own custom parsers.

Do you have a tutorial or way for someone that is new to creating parsers to be able to create some?

[Anonymous · Accepted solution]

If you are looking at custom Lua parsers, the Parsers book (located here:  )  is required reading.  It provides some guidance on how to build your own.

I also put together a Lua template to help as well.

[RSAAdmin]

Also have a look at this guide:

https://knowledge.rsasecurity.com/docs/rsa_env/envision/41sp1/enVision_universaldevicesupport_guide.pdf

[Anonymous]

David's document is the best starting point.

You'll need to manually extract the *msg.xml and *.ini file from the ESI generated parser, and also modify the XML to specify device="2.0".  There are lots of other gotchas including understanding the mapping from EnVision key names to SA metanames, what's indexed.

[DavidWaugh1]

There are also some online learning course on the Event Source Integration Tool.

The course code is:

RSA-ENVESI

This is a free e-learning course you just need to register.

https://edu.corp.emc.com/search/widgets_template1.aspx

If you have any problems accessing to content then Education Service can assist. You can contact them at

http://emc.force.com/EducationSupport

I also attach the documentation for the Event Source Integration Tool and also the latest BETA ESI Tool which describes more about how parsers are created.