> ## Documentation Index
> Fetch the complete documentation index at: https://parser.xdr.ooo/llms.txt
> Use this file to discover all available pages before exploring further.

# Parser identity, listener port, and forwarded log boundaries

> Configure source metadata, the listener port, and explicit relay prefix or postfix marks.

# Configure the parser source and listener

The current Auto Parser uses **Parser identity** to name files and choose the listener port stored in the generated configuration.

## Identity fields

* **Manufacturer**: the product manufacturer, such as Fortinet.
* **Product**: the actual device or service product, such as FortiGate.
* **Version**: optional, only if established from a reliable product record.
* **Parser listener port (.conf)**: the receiving port in the generated CONF. The current default is **6801**.

The customized\_vendor\_product naming convention derives from manufacturer/product; version belongs to metadata, not the filename.

![Current Parser Studio source identity and listener settings](https://mintcdn.com/xdr-parser/eZQo8zkyp__tw0U0/images/current-01-auto-parser-start.png?fit=max\&auto=format\&n=eZQo8zkyp__tw0U0\&q=85\&s=ce2fd22e05ef626ab800d7e2e9dbf69a)

## Explicit forwarding boundaries

Some upstream relays add text before or after a vendor record. Parser Studio does **not** assume it can safely strip this prefix automatically.

1. Paste the original forwarded records.
2. Expand **Optional: mark a forwarded prefix or trailing suffix**.
3. Select the exact bytes corresponding to the relay's addition, then choose **Mark selection as prefix** or **Mark selection as postfix**.
4. Check the proposed marks and select **Apply declared relay profile** only when they match the actual source.
5. For known Syslog relays, optionally use **Optional: declare Syslog forwarder hostnames**.

Check sample framing and exact byte positions. Upload original files instead of pasting if CRLF preservation matters.

## Practical limits and verification

The current analysis limit is **64 KiB or 500 logical events** per input. Successful source extraction alone does not verify a deployable Fluentd parser or Stellar Cyber ingestion.

[Auto Parser workflow](https://parser.xdr.ooo/workflows/auto-parser.md) · [Create and download](https://parser.xdr.ooo/workflows/create-and-download.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.