Event data processing in the QRadar product
In the QRadar® product, use the Data Parser to solve parsing problems and to add custom parsing.
The Data Parser provides real-time feedback so that you know whether your customization works the way that you expect it to.