Create a parser

post

https://api.us-west.exabeam.cloud/log-stream/v1/parsers

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Query Params

parserOriginalName

string

isDuplicate

boolean

Body Params

parserName

string

required

length between 0 and 128

^[a-zA-Z0-9_-]+$

Human-readable parser name

extractionType

string

enum

Extraction type (defaults to 'regex')

Allowed:

version

string

required

length between 0 and 32

Parser version string, e.g. '1.0'

vendor

string

required

length between 0 and 128

Vendor name

vendorMatch

boolean

Whether to match based on the vendor field in the log (defaults to false)

product

string

required

length between 0 and 128

Product name

priority

int64

≥ 0

Parser priority; lower values run first (defaults to 1)

state

string

enum

required

Initial parser state

Allowed:

stage

int64

Processing stage index (defaults to 0)

timeFormat

string

required

length between 0 and 128

Primary time format string

timeFormats

array of strings

Additional time format strings to try (defaults to empty list)

timeFormats

conditions

array of strings

required

length between 1 and 2147483647

Log match conditions (regex or key-value expressions)

conditions*

fields

array of strings

required

Field extraction expressions

fields*

customFields

array of strings

Custom field definitions (defaults to empty list)

customFields

dupFields

array of strings

Fields to deduplicate (defaults to empty list)

dupFields

eventTypes

array of strings

required

length between 1 and 2147483647

Event type classifications

eventTypes*

subject

string

required

length between 0 and 128

Subject classification

logFileId

string

length between 0 and 128

Associated example log file ID (optional)

productCategory

string

length between 0 and 1024

Product category classification (optional)

Responses

403

Forbidden. The caller lacks the required permissions

Language

Credentials

OAuth2

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

201Parser created