Log parsing is extracting relevant data from unstructured event log records. Parsing is based on rules to segment messages into named fields or columns. It applies techniques to extract data elements from the incoming log data and split them into individual fields for easier consumption by other systems. A common parsing method is using regular expressions with capturing groups.

Once an input module receives a log record, additional parsing may be required to enhance the log data. NXLog includes dedicated modules for parsing specific data formats. Additionally, the NXLog language supports regular expressions with named capturing groups and provides several string manipulation functions.

log parsing, log file parsing, event log parsing, log parser

Parsing various log formats
Parsing timestamps
Parsing BIND 9 logs