Hi all. I'm having issues with this JSON custom parser. I'm trying to
test it but I receive an error without any details or parser used. I
tried everything and I'm not sure where to go next. Here is the parser:
,\[json\]=<_json:gPat...
Hi cdurkin,Thanks for all your help so far. I've narrowed down the
problem to the event format recognizer. Unfortunately your solution
while it works doesn't work in mine. Apparently, the issue is spaces. I
tried using regex but it doesn't work. Is t...
Thank you so much! I think the issue then might have been with the event
format recognizer. I'll update when I can narrow down the error. I
attached an image link of what the error was.Thank you again!
Hi Chris,Thanks for the reply. I tried your solution but I still got an
error. Unfortunately FortiSIEMdoesn't tell me what the error is and
instead just highlights the test area red.Thanks again for the help
though!
