Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 319

Chapter 15 Configuring Custom Devices
Figure 15-14
The key pattern is empty above since the log message starts with a value pattern.
Step 26
Figure 15-15
The Parsed Field above is a Date/Time field. In addition to Value Pattern, a value format is required
Step 27
since a date/time can be specified in arbitrarily different ways. Details on how to specify the value format
are given in Appendix F. Several pattern names with a few of the commonly used date/time formats have
been predefined.
78-17020-01
Key Pattern for HTTP Status OK
Position 2 Key Pattern for HTTP Status OK
Adding User Defined Log Parser Templates
User Guide for Cisco Security MARS Local Controller
15-11