Editing Parsing Rules

You can update custom parsing rules at any time.

Note: You cannot update parsing rules that are defined for the system data model and LogLogic LMI built-in data models.

Procedure

  1. In the Parsing rules panel, click the rule name that you want to update.
  2. In the Edit parsing rule panel update the rule information. For details about each field, see Adding a Parsing Rule.
  3. Click to refresh the Parser preview panel to view all extracted columns and their data types that are matched by the corresponding parsing rule. Each event that matches with the corresponding rule is identified in the same color for easy readability.
  4. Click to save the updated information. The Parsing rules panel is updated immediately.