XDR Labs / Parser Studio
Paste a log. We’ll guide you from there.
You do not need to know whether a log is CEF, LEEF, JSON, or something else. Copy a few events into Parser Studio, click Analyze Logs, and follow the results to your parser files.
1. PasteCopy a few complete events from your product.
2. AnalyzeFind out which events and fields were recognized.
3. CreateReview names, check the sample and download validated draft files.
What should I do after Analyze Logs?
You start the same way in every case: open Auto Parser, paste logs, and press Analyze Logs. The next step depends on what the result says.Everything was parsed
Continue to Review Fields → Map Fields → Create Parser. You do not need to change formats or write rules.
Some text needs attention
Select the flagged event, inspect the highlighted section, and use the recommended fix.
Parser Studio does not understand my logs
Use ChatGPT Assisted Parser, prepare a masked example, and review the suggested solution.
My product has several log types
Paste representative examples of all types, review the event counts, and choose a combined or separate draft according to the supported result.
The normal path
Add Logs→Analyze Logs→Review Fields→Map Fields→Create Parser
Pick an example that matches your situation
My first five minutes
Follow every click from pasted logs to the final file-creation screen.
A red or yellow warning appears
Find the exact unparsed text and the next action.
My CSV data has no field names
Preserve all columns and confirm their names.
Multiple event shapes
Review whether one combined parser is supported.
The examples use fictional logs, and the screenshots show the actual product UI. A complete sample review supports a draft for those records, not a guarantee for all unseen messages.