General Description
CSV Normalizer normalizes the CSV logs separated by delimiters: comma, space, tab, semicolon, hash, and pipe.
Release Details
|
Fields |
Details |
|---|---|
|
Name |
CSVNormalizer |
|
Version |
5.1.1 |
|
Supported On |
LogPoint v6.7.0 and later |
|
Release Date |
2021-04-20 |
| Document Date | 2020-04-20 |
| Download | CSVNormalizer_v5.1.1.pak |
| SHA256 | 1c956834c88477c200d701d5fd605c5ecf43557da34a4063dd335bd68c9d3791 |
Package Details
The application consists of the following components:
-
-
Compiled Normalizer
- CSVNormalizer
-
Compiled Normalizer
Bug Fix
An issue in the compiled normalizer CSVNormalizer where the value of the field ending with _ts was not automatically captured in the date and time format has now been resolved.
Installation
Follow these steps to install the CSVNormalizer v5.1.1 application:
- Download the CSVNormalizer_5.1.1.pak file from the Download section above.
- Install the application by importing the pak file to LogPoint under Settings >> System >> Applications.
For more details, refer to the CSVNormalizer Manual.
Supported Devices
LogPoint supports any devices with a valid CSV log format.
Log Formats
Expected Log Format
Comma-separated
Log Sample
54,"Web, Ads/Analytics",http,OBSERVED,TCP_NC_MISS,752,logpoint\\LogPoint%20Tech%20Team
Expected Log Format
Space-separated
Log Sample
54 "Web Ads/Analytics" http OBSERVED TCP_NC_MISS 752 "logpoint\\LogPoint%20Tech%20 Team"
Expected Log Format
Hash-separated
Log Sample
54#"Web# Ads/Analytics"#http#OBSERVED#TCP_NC_MISS#752#logpoint\\LogPoint%20Tech%20Team
Expected Log Format
Semicolon-separated
Log Sample
54;"Web; Ads/Analytics";http;OBSERVED;TCP_NC_MISS;752;logpoint\\LogPoint%20Tech%20Team
Expected Log Format
Pipe-separated
Log Sample
54|"Web| Ads/Analytics"|http|OBSERVED|TCP_NC_MISS|752|logpoint\\LogPoint%20Tech%20Team
Expected Log Format
Tab-separated
Log Sample
54 "Web Ads/Analytics" http OBSERVED TCP_NC_MISS 752 logpoint\\LogPoint%20Tech%20Team
Change in the Previous Version
Enrichment
The application has been updated to comply with LogPoint v6.7.0.
Release Details
|
Fields |
Details |
|---|---|
|
Name |
CSVNormalizer |
|
Version |
3.0.0 |
|
Supported On |
LogPoint v6.0.0 to v6.6.6 |
|
Release Date |
2018-09-13 |
| Document Date |
2018-09-13 |
| Download | CSVNormalizer_3.0.0.zip |
| SHA256 |
50c12e240c8a34f224e883cbe7857d4afcef975cf6813d9fddff7315f0436eb3 |
Installation
Follow these steps to install the CSVNormalizer v3.0.0 application:
- Download the CSVNormalizer_3.0.0.zip file from the Download section above.
- Extract the zip file to obtain the CSVNormalizer_3.0.0.pak file.
- Go to Settings >> System >> Applications.
- Click Import and a pop-up panel appear.
- Browse for the location of the CSVNormalizer v3.0.0 file downloaded earlier.
- Click Upload.
- After installing the application, you can view the CSVNormalizer 3.0.0 entry under Settings >> System >> Plugins.
- Go to Settings >> System >> Plugins.
- Click Manage to configure the normalizers.
Please refer to the CSVNormalizer Manual for more details.
Configuration of Sources
Expected Log Formats
- Comma-separated
- Space-separated
- Hash-separated
- Semicolon-separated
- Pipe-separated
- Tab-separated
Log Samples
54,"Web, Ads/Analytics",http,OBSERVED,TCP_NC_MISS,752,logpoint\\LogPoint%20Tech%20Team
54 "Web Ads/Analytics" http OBSERVED TCP_NC_MISS 752 "logpoint\\LogPoint%20Tech%20 Team"
54#"Web# Ads/Analytics"#http#OBSERVED#TCP_NC_MISS#752#logpoint\\LogPoint%20Tech%20Team
54;"Web; Ads/Analytics";http;OBSERVED;TCP_NC_MISS;752;logpoint\\LogPoint%20Tech%20Team
54|"Web| Ads/Analytics"|http|OBSERVED|TCP_NC_MISS|752|logpoint\\LogPoint%20Tech%20Team
54 "Web Ads/Analytics" http OBSERVED TCP_NC_MISS 752 logpoint\\LogPoint%20Tech%20Team
To export data to LogPoint, use the Syslog collector on port 514 on the LogPoint server.
Sample Logs
Documentation
You can obtain the CSVNormalizer Manual from the Download section above.
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Article is closed for comments.