首页>
外国专利>
Reparsing unsuccessfully parsed event data in a security information and event management system
Reparsing unsuccessfully parsed event data in a security information and event management system
展开▼
机译:在安全信息和事件管理系统中重新解析未成功解析的事件数据
展开▼
页面导航
摘要
著录项
相似文献
摘要
A mechanism is provided for reparsing unsuccessfully parsed event data. Responsive to determining that one or more unsuccessfully parsed event data items exist for a log source, each unsuccessfully parsed event data item of the one or more unsuccessfully parsed event data items is reparsing using an updated device support module associated with the log source. Responsive to the device support module successfully reparsing the unsuccessfully parsed event data item thereby forming a successfully parsed event data item, the successfully parsed event data item is added to a historical record of events associated with the log source. Responsive to the device support module failing to successfully reparse the unsuccessfully parsed event data item, the unsuccessfully parsed event data item is retained in an unsuccessfully parsed event data item data structure.
展开▼