Create a Parser Package

Build a package that parses and cleans log events. The workflow scaffolds a Tenzir package directory, adds user-defined operators for parsing and cleaning, writes tests, and adds end-to-end examples.

Workflow

Execute each step in order. Verify the Results before moving on.

1. Understand your data

Analyze the sample data to determine the log format, vendor, and product. Search the web for additional samples or documentation when the format is unfamiliar.

Results:

• Context around the given samples (format, fields, semantics)
• Vendor and product names for the package