4 Replies Latest reply on Apr 19, 2017 8:56 AM by paul.k

    Custom Parsed events not showing up in the views

    paul.k

      Dear Community,

       

      I have write a small parser to capture some logs from a flat text file.

      The data never appears in any views.

      At the moment I am manually uploading sample files.

      I set view to all time as the sample logs are a bit old.

      Date insertion limits are disabled.

       

      I can't figure out why it's not displaying the events.

       

      Thank You

       

      Sample log entry

      17-01-05 12:30:45 439 DEBUG         xxx.xxxxx.blahs.blah.blah - access.jaeleno=123456789S

      Sample rule.

      The data source is configured as generic syslog

       

      Data source rules get created