Specifications

Displays the the selected Fields and Delimiters that determine how each data element in the sample
line will be parsed and placed in a column in the Event View.
Sample Log Line
This is a sample of raw log information.
Parsed
This table shows how the information will be presented in the Events tab. Cells are filled with the
sample line information as field types are selected and delimited.
Buttons
New
This button places a default name into the name field and clears the Pattern field, allowing you to
define a new pattern. You can swipe the default name and type a name of your own choosing.
Delete
This button removes the currently selected pattern.
(Add Field)
This button (below the Fields list) adds the currently selected field to the Pattern field. You can also
double click a field type to add it to the pattern or you can type field types directly into the pattern.
(Add Delimiter)
This button (below the Delimiters list) adds the currently selected delimiter to the Pattern field. You
can also double click a delimiter to add it to the pattern or you can type a delimiter directly into the
pattern.
Apply
Applies the current pattern to the Pattern Name, but leaves the window open to allow
creating/modifying another pattern.
OK
Applies the current pattern to the Pattern Name and closes the window.
Automated Security Manager Help
Custom Pattern Configuration Window 188