Cortex Toolbox
Kitlist Builder
Ingest Calculator
Content ▾
Packs
Integrations
Playbooks
Scripts
Incident Types
Incident Fields
Classifiers
Layouts
Parsing Rules
Correlation Rules
Modeling Rules
Reputation Commands
Threat Feeds
Docs ▾
Documentation
Analytics Alerts
XDM Explorer
Settings ▾
Show test playbooks
Show deprecated content
Sign in
Parsing Rules
150 parsing rules.
Name
Pack
From Version
AWS ELB Parsing Rule
AWS Elastic Load Balancing
8.4.0
AWS WAF Parsing Rule
AWS WAF
8.2.0
AWSGuardDuty Parsing Rule
AWS - GuardDuty
6.10.0
Absolute Parsing Rule
Absolute
8.4.0
Akamai GuardiCore Parsing Rule
Akamai GuardiCore
8.12.0
Akamai_WAF Parsing Rule
Akamai WAF SIEM
6.10.0
Alibaba Parsing Rule
Alibaba Action Trail
6.10.0
Amazon AWS CloudTrail Parsing Rule
AWS - CloudTrail
8.7.0
Apache Tomcat Parsing Rule
Apache Tomcat
6.10.0
ApacheWebServer Parsing Rule
Apache Web Server
6.10.0
Arista Switch Parsing Rules
Arista Switch
8.2.0
Armis Security Parsing Rule
Armis
6.10.0
Atlassian Confluence Parsing Rule
Atlassian Confluence Cloud
8.4.0
Atlassian Jira Parsing Rule
Atlassian Jira Data Center
8.4.0
Azure AKS Parsing Rule
Azure Kubernetes Services
8.5.0
Azure App Service Parsing Rule
Azure App Service
8.7.0
Azure DevOps Parsing Rule
AzureDevOps
8.5.0
Azure Firewall Parsing Rule
Azure Firewall
8.7.0
Azure WAF Parsing Rule
Azure WAF
8.5.0
Barracuda Cloudgen Firewall Parsing Rule
Barracuda Cloudgen Firewall
8.11.0
Barracuda Email Protection Parsing Rule
Barracuda Email Protection
8.2.0
Barracuda WAF Parsing Rules
Barracuda WAF
8.2.0
BeyondTrust Password Safe Parsing Rule
BeyondTrust Password Safe
8.4.0
BeyondTrust Privileged Remote Access Parsing Rule
Beyond Trust Privileged Remote Access
8.3.0
BeyondTrust Remote Support Parsing Rule
Beyond Trust Remote Support
8.4.0
Bitbucket Parsing Rule
Bitbucket
8.4.0
Bluecat Address Manager Parsing Rule
Bluecat Address Manager
8.4.0
BoxEventCollector Parsing Rule
Box
6.10.0
BrocadeSwitch Parsing Rule
Brocade Switch
6.10.0
Cisco ASR Parsing Rule
Cisco ASR
8.4.0
Cisco Catalyst Parsing Rule
Cisco Catalyst
6.10.0
Cisco ISE Parsing Rule
Cisco ISE
8.2.0
Cisco ISR Parsing Rule
Cisco ISR
8.4.0
Cisco Meraki Parsing Rule
Cisco Meraki
6.10.0
Cisco Nexus Parsing Rule
Cisco Nexus
8.2.0
Cisco UCM Parsing Rule
Cisco UCM
8.3.0
Cisco Umbrella Cloud Security Parsing Rule
Cisco Umbrella cloud security
8.3.0
Cisco WLC Parsing Rule
Cisco Wireless LAN Controller
8.3.0
CiscoASA Parsing Rule
Cisco ASA
8.11.0
CiscoSMA Parsing Rule
CiscoSMA
6.10.0
Citrix ADC Parsing Rule
Citrix ADC
8.4.0
Clearswift DLP Parsing Rules
Clearswift DLP
8.2.0
Cloudflare WAF Parsing Rule
Cloudflare WAF
8.2.0
Corelight Zeek Parsing Rules
Corelight Zeek
6.10.0
CyberArk EPV Parsing Rule
CyberArk PAM Self-Hosted
8.3.0
CyberArkIdentity Parsing Rule
CyberArk Identity
6.10.0
Dell EMC Unity Parsing Rule
Dell EMC Unity
8.3.0
F5 APM Parsing Rule
F5 APM
8.4.0
F5 BIG-IP Advanced WAF Parsing Rule
F5 BIG-IP Advanced WAF
8.4.0
F5LTM Parsing Rule
F5 LTM
8.2.0
FireEye HX Parsing Rule
FireEye HX
8.2.0
FireEyeNX Parsing Rule
FireEye Network Security (NX)
6.10.0
Forcepoint DLP Parsing Rule
Forcepoint DLP
8.3.0
FortiGate Parsing Rule
FortiGate
6.10.0
Fortimail Parsing Rule
Fortimail
8.4.0
Fortinet FortiManager Parsing Rule
FortiManager
8.4.0
Fortinet Fortiweb Parsing Rule
Fortinet Fortiweb
8.4.0
GitLab Parsing Rule
GitLab
6.10.0
Github Parsing Rule
GitHub
6.10.0
Google Chrome Parsing Rule
Google Chrome
8.4.0
Google Cloud Logging Parsing Rule
Google Cloud Logging
8.5.0
Google Cloud SCC Parsing Rule
Google Cloud SCC
8.4.0
GoogleDrive Parsing Rule
Google Drive
6.10.0
HPE Aruba ClearPass Parsing Rule
HPE Aruba Clearpass
8.3.0
HashiCorp Vault Parsing Rule
HashiCorp Vault
8.5.0
HelloWorld Parsing Rule
HelloWorld
8.4.0
Huawei FW Parsing Rule
Huawei FW
8.5.0
Huawei Network Devices Parsing Rule
Huawei Network Devices
8.4.0
IBM LDAP Parsing Rule
IBM Directory Server for IBM (LDAP)
8.4.0
IBM_Security_Verify Parsing Rule
IBM Security Verify
6.10.0
Infoblox Parsing Rule
Infoblox NIOS
6.10.0
Ivanti Connect Secure Parsing Rules
Ivanti Connect Secure
8.2.0
Ivanti VTM Parsing Rule
Ivanti Pulse Secure VTM
8.2.0
Jira Parsing Rule
Atlassian Jira
6.10.0
JuniperSRX Parsing Rule
JuniperSRX
6.10.0
Kiteworks Parsing Rule
Kiteworks
8.4.0
Kubernetes Parsing Rules
Kubernetes
8.2.0
LenelS2 NetBox Parsing Rule
LenelS2 NetBox
8.4.0
Linux Events Collection Parsing Rule
Linux Events Collection
6.10.0
ManageEngine ADManager Parsing Rule
ManageEngine ADManager Plus
6.10.0
ManageEngine ADSelfService Plus Parsing Rule
ManageEngine ADSelfService Plus
8.3.0
McAfeeEpo Parsing Rule
McAfee ePO
8.5.0
McAfeeNSM Parsing Rule
McAfee NSM
8.2.0
Mcafee Web Gateway Parsing Rule
McAfee Web Gateway
8.4.0
Microsoft ADFS Collection Parsing Rule
Microsoft AD FS Collection
8.3.0
Microsoft Azure Events Hub Parsing Rule
Microsoft Azure Events Hub (Deprecated)
6.10.0
Microsoft Cloud App Security Parsing Rule
Microsoft Defender for Cloud Apps
6.10.0
Microsoft Common
Microsoft Logs Base
8.2.0
Microsoft DHCP Parsing Rule
Microsoft DHCP
8.4.0
Microsoft DNS Parsing Rule
Microsoft DNS
8.4.0
Microsoft Defender Advanced Threat Protection Parsing Rule
Microsoft Defender for Endpoint
6.10.0
Microsoft Defender For Cloud Parsing Rule
Microsoft Defender for Cloud
8.3.0
Microsoft Entra ID Parsing Rule
Azure Logs
8.5.0
Microsoft Graph Security Parsing Rules
Microsoft Graph Security
8.2.0
Microsoft IIS Web Server Parsing Rule
Microsoft IIS Web Server
6.10.0
Microsoft WSUS Parsing Rule
MicrosoftWSUS
6.10.0
Microsoft Windows AMSI Parsing Rule
Microsoft Windows AMSI
8.3.0
Microsoft Windows Events Parsing Rule
Microsoft Windows Event Logs
8.2.0
Microsoft Windows Sysmon Parsing Rule
Microsoft Sysmon
8.4.0
MicrosoftExchangeServer Parsing Rule
Microsoft Exchange Server
6.10.0
MicrosoftIntune Parsing Rule
Microsoft Intune
8.2.0
MicrosoftNPS_Parsing_Rule
Microsoft NPS
6.10.0
Mimecast Parsing Rule
Mimecast
6.10.0
MySQLEnterprise Parsing Rule
MySQL Enterprise
6.10.0
NGINX Web Server Parsing Rule
NGINX Web Server
6.10.0
NVIDIA DOCA Argus Parsing Rule
NVIDIA DOCA Argus
8.4.0
Nasuni File Services Parsing Rule
Nasuni File Services
8.3.0
Netmotion VPN Parsing Rule
Netmotion VPN
8.5.0
Office 365 Parsing Rule
Office 365
8.5.0
Okta Parsing Rule
Okta
6.10.0
OktaOAG Parsing Rule
Okta Access Gateway
6.10.0
Oracle OAM Parsing Rule
Oracle IAM
8.5.0
Oracle Parsing Rule
Oracle Database
6.10.0
Palo Alto Prisma Cloud Parsing Rule
Prisma Cloud by Palo Alto Networks
8.2.0
Prisma Cloud Compute Parsing Rule
Prisma Cloud Compute by Palo Alto Networks
8.3.0
Prisma SAAS Security Parsing Rule
SaaS Security by Palo Alto Networks
8.4.0
Proofpoint Email Security Parsing Rule
Proofpoint Email Security
8.5.0
Proofpoint Threat Response Parsing Rule
Proofpoint Threat Response
6.10.0
ProofpointCASB Parsing Rule
Proofpoint CASB
8.2.0
ProofpointServerProtection Parsing Rule
Proofpoint Protection Server
8.3.0
ProofpointTAP Parsing Rule
Proofpoint TAP
8.3.0
Radware Cloud Services Parsing Rule
Radware Cloud WAF Services
8.3.0
Reblaze WAF Parsing Rule
Reblaze WAF
8.5.0
Riverbed Flow Gateways Parsing Rule
Riverbed Flow Gateways
8.9.0
Salesforce Parsing Rule
Salesforce
8.3.0
SecureAuth IdP Parsing Rule
SecureAuth Identity Platform
8.4.0
Semperis DSP Parsing Rule
Semperis DSP
8.3.0
Siemens SiPass Parsing Rule
Siemens SiPass
8.4.0
Silverfort Admin Console Parsing Rule
Silverfort
8.6.0
Slack Parsing Rule
Slack
8.13.0
SonicwallNSv Parsing Rule
SonicWall NSv
8.2.0
Squid Parsing Rule
Squid
8.4.0
Symantec BlueCoat ProxySG Parsing Rules
Symantec BlueCoat ProxySG
6.10.0
Symantec Cloud Secure Web Gateway Parsing Rule
Symantec Cloud Secure Web Gateway
8.4.0
Symantec Endpoint Protection Parsing Rule
Symantec Endpoint Protection
8.4.0
Synopsys Coverity Parsing Rule
Synopsys Coverity
8.3.0
Tableau Parsing Rule
Tableau
6.10.0
Tanium Parsing Rule
Tanium
8.2.0
Tanium Threat Response Parsing Rule
Tanium Threat Response
8.4.0
Tigera Calico Parsing Rule
Tigera Calico
8.4.0
Trellix ePO Parsing Rule
Trellix_ePO
8.5.0
TrendMicro InterScan Web Security Suite Parsing Rule
Trend Micro InterScan Web Security
8.4.0
UnixAuditd Parsing Rule
Auditd
6.10.0
VMWare NSX Parsing Rule
VMWare NSX
8.4.0
VMware ESXi Parsing Rule
VMware ESXi
8.13.0
VMware vCenter Parsing Rule
VMware vCenter
6.10.0
Workday Parsing Rule
Workday
8.2.0
Zscaler ZIA Parsing Rule
Zscaler Internet Access
8.5.0
jamf Parsing Rule
Jamf
8.4.0
safenet_trusted_access_parsing_rule
Thales SafeNet Trusted Access
6.10.0