Learn parsing by example. This multimedia walkthrough of the parser documentation is useful for those who would like to see a live demonstration of the concepts in the docs.
Table of Contents:
00:30 - Log Parsers
04:00 - Parser Editors
06:44 - Line Formats
12:06 - Parsing Line Fragment
15:22 - Field Patterns
21:26 - Rewrites
26:04 - Special Fields Timestamp, Severity, Message
31:51 - Format Details
34:02 - Tagging Line Formats
37:39 - Parsing URLs and JSON
40:56 - Parsing Key-Value Logs
44:58 - Line Groupers
50:44 - Discards
Related Resources:
Parsing Deep Dive: • Parsing 1: Why Parse?
Redaction and Rewrites: • Data Manipulation: Redaction & Rewrites