How to write a Parser

[YossiNagar]

Hi,

I want to lern by myself how to write a parsers to Security Analytics.

There is kind of documentation that can help me to understand how to do that?

Thanks,

Yossi.

[ArthurCostigan1]

Dave Glover did a great job on this.  It was helpful for me making the transition between the old tool and the new one.

[DaveGlover]

I do have a few videos showing a walk through that I have posted to youtube.  You can find the links to the videos here in the forum under my posts

[JoeGumke]

thanks dave . any chance you could help publish documentation/videos on building out a custom tagvaluemap parser from scratch? may help provide a stop gap since the esi tool doesnt support this.

[JoeGumke]

also, any cool functions that arent clearly defined would be nice to share. For instance, I have noticed some new functions in proxy parsers released by RSA that leverage "CALC"? Any chance you could share all available functions, and documentation on these