SA Log Parser Creation

[pranavsankar1]

Hi Folks,

Is anyone can help me out how the xml log parsing works in SA? I would like to learn and understand  how xml works in SA - creation,modification of parsers. I have checked in sadocs but couldnt help me.

It could be appreciable if any one sent me any links regarding xml log parsing.

Regards

Pranav Sankar

[pranavsankar1]

Thats great dave can you share the video link ?

[pranavsankar1]

Dave could you please share the link

[DaveGlover]

Here you go

Dropbox - parsing.mp4

[LuisManuelCruzG]

Hola, alguien me puede decir como puedo migrar los logs parseados de EnVision a Security Analytics?. Gracias

O bien, como puedo parsear los logs en Security Analytics?. Gracias

[pranavsankar1]

Luis could you please translate to english?

[LuisManuelCruzG]

Hi, can someone tell me how I can save the parsed logs to Security EnVision Analytics ?. Thank you

Or, as I can parse the logs in Security Analytics ?. Thank you

[LuisManuelCruzG]

Sorry...

Hi, can someone tell me how I can save the parsed logs EnVision to Security Analytics ?. Thank you

Or, as I can parse the logs in Security Analytics ?. Thank you

[DaveGlover]

I am not sure If I understand your question.

envision and Security Analytics use the same parsers.

Could you please clarify your question?

Thanks

Dave

[DaveGlover · Accepted solution]

I just created a new video on using the new ESI tool.  Check it out

RSA ESI 106 - YouTube

[pranavsankar1]

thanks dave