Skip to main content
Version: Tenzir v4.11

parse

Applies a parser to the string stored in a given field.

Synopsis

parse <input> <parser> <args>...

Description

The parse operator parses a given <input> field of type string using <parser> and replaces this field with the result. <parser> can be one of the parsers in formats.

Examples

Parse CEF from the Syslog messages stored in test.log, returning only the result from CEF parser.

from test.log read syslog | parse content cef | yield content