Yes, when you create a field extraction rule you can choose from the 'Templates' drop-down list. If you can't find the one you need, try parsing in the search interface, then copying that scope and parse statement over into your own Field Extraction Rule.
More information can be found in the link below:
https://help.sumologic.com/Manage/Field-Extractions/Create-a-Field-Extraction-Rule
Comments
0 comments
Please sign in to leave a comment.