4 Replies Latest reply on Apr 19, 2017 8:56 AM by paul.k

    Custom Parsed events not showing up in the views


      Dear Community,


      I have write a small parser to capture some logs from a flat text file.

      The data never appears in any views.

      At the moment I am manually uploading sample files.

      I set view to all time as the sample logs are a bit old.

      Date insertion limits are disabled.


      I can't figure out why it's not displaying the events.


      Thank You


      Sample log entry

      17-01-05 12:30:45 439 DEBUG         xxx.xxxxx.blahs.blah.blah - access.jaeleno=123456789S

      Sample rule.

      The data source is configured as generic syslog


      Data source rules get created