Glossary: Logs and Data Sources for Investigations

Log parsing

Also written: parsing, parser, parsers

Turning raw log lines into answers by filtering lines, extracting fields, counting and ordering events. A SIEM's parsers do this automatically, and investigators do it by hand with grep, awk, sort, uniq and jq.