Fortinet white logo
Fortinet white logo

User Guide

Parser Specification

Parser Specification

A Parser file is written using XML syntax. It consists of the following sections:

  • General Parsing Patterns: This is a list of regular expressions of parsing patterns that can be used in parsing instructions.

  • Event Format Recognizer: This section specifies the condition that a log must match to be able to be parsed by the instructions in this file.

  • Parsing Instructions: This specifies instructions for parsing the logs matching the Event Format Recognizer.

The overall structure of a Parser XML file is

<patternDefinitions> </patternDefinitions>
<eventFormatRecognizer> </eventFormatRecognizer>
<parsingInstructions> </parsingInstructions>

The following Parser Specification topics are available:

Parser Specification

Parser Specification

A Parser file is written using XML syntax. It consists of the following sections:

  • General Parsing Patterns: This is a list of regular expressions of parsing patterns that can be used in parsing instructions.

  • Event Format Recognizer: This section specifies the condition that a log must match to be able to be parsed by the instructions in this file.

  • Parsing Instructions: This specifies instructions for parsing the logs matching the Event Format Recognizer.

The overall structure of a Parser XML file is

<patternDefinitions> </patternDefinitions>
<eventFormatRecognizer> </eventFormatRecognizer>
<parsingInstructions> </parsingInstructions>

The following Parser Specification topics are available: