Services Config View - Parser Mappings Tab

This topic provides a description of the configurable options for a Log Decoder in the Parser Mappings tab.

In the Parser Mappings Administrators can configure log parser mappings for Log Decoder services. To access the Parser Mappings tab, go to netwitness_adminicon_25x22.png (Admin) > Services > select a Log Decoder service and click netwitness_ic-actns.png > View > Config > Parser Mappings tab.

Note: You can also configure log parser mappings for Log Decoder services by navigating to Admin > Services > Event Sources > Discovery.

This feature is intended to track a subset of event sources that is parsing against the wrong parser.

What do you want to do?

User Role

I want to... Documentation
Administrator Manage IPs for Event Source Mapping. Enable Parser Mappings

Related Topics

Quick Look

This is an example of the tab.

netwitness_12.1_prsmaptb1_1122.png

1 Parser Mappings Toolbar - Provides options to work with parser mappings in the list
2 Parser Mappings List - Lists all parsers that are currently mapped on the Log Decoder

Parser Mappings Toolbar

The Parser Mappings toolbar has options to work with parser mappings in the grid.

Feature Description
netwitness_add.png Add a parser mapping.
netwitness_delete.png Delete the selected parser mapping.
netwitness_edit.png Edit a parser mapping.
netwitness_ic-refresh.png Refresh the list of parser mappings.
netwitness_ic-actns.png Display the Actions menu.
  • Import - Import a parser mapping to a file.
  • Export - Save a parser mapping to a file.

Parser Mappings List

The Parser Mappings list displays all parsers that are currently mapped on the Log Decoder.

Parameter Description
Host Displays the IP address of the host.
Event Source Displays the event sources that are parsing incorrectly.

Parser Mappings Editor Dialog

The Parser Mappings Editor dialog allows you to update an IP to event source mapping.

To access the Parser Mappings Editor dialog, in the Services Config view for a Log Decoder, select the Parser Mappings tab.