Managing Parsers

Scenarios

This topic describes how to perform the following operations: Viewing Parsers, Importing a Parser, Exporting a Parser, and Deleting a Parser.

Viewing Parsers

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

5. In the navigation pane on the left, choose Log Audit > Collections. Then, select the Parsers tab.
   Figure 2 Accessing the Parsers tab page
   

6. On the Parsers page, view the detailed information about parsers.

   Table 1 Parsers parameters

   Parameter	Description
   Name	Name of the parser.
   Channel	Number of channels that are used by the parser
   Description	Description of the parser.
   Operation	Operations such as editing or deleting the parser

7. On the Parsers page, click the Templates tab.
8. On the Templates tab displayed, view the parser templates you can use.

   Table 2 Parser template parameters

   Parameter	Description
   Name	Name of a parser template
   Description	Description of the parser template
   Operation	Creating a parser from a template.

Importing a Parser

• Only .json files no larger than 1 MB can be imported.
• A maximum of five parser files can be imported at a time, and each parser file can contain a maximum of 100 parsers.

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 3 Workspace management page
   

5. In the navigation pane on the left, choose Log Audit > Collections. Then, select the Parsers tab.
   Figure 4 Accessing the Parsers tab page
   

6. On the Parsers tab, click Import in the upper left corner above the parser list.
7. In the displayed Import dialog box, click Select File and select the JSON file you want to import.
   

   • Only .json files no larger than 1 MB can be imported.
   • A maximum of five parser files can be imported at a time, and each parser file can contain a maximum of 100 parsers.

8. Click OK.

   You can view imported parsers in the parser list.

Exporting a Parser

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 5 Workspace management page
   

5. In the navigation pane on the left, choose Log Audit > Collections. Then, select the Parsers tab.
   Figure 6 Accessing the Parsers tab page
   

6. On the Parsers page, select the parsers you want to export and click Export above the list.

   The system automatically downloads the parser file in .json format to your local PC.

Deleting a Parser

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 7 Workspace management page
   

5. In the navigation pane on the left, choose Log Audit > Collections. Then, select the Parsers tab.
   Figure 8 Accessing the Parsers tab page
   

6. On the Parsers tab, locate the row that contains the target parser and click Delete in the Operation column.
7. In the displayed dialog box, click OK.