Google SecOps/Chronicle Parser Development - Learning Material

 

Hi Everyone,

I am just starting with Google SecOps/Chronicle and find creating custom/new parsers interesting. I was wondering if there is a course or clear documentation on how to get started with writing parsers and how to create an efficient one.

Solved Solved
1 5 1,198
1 ACCEPTED SOLUTION

Hi Silas.  

Hereโ€™s some content related to syntax 

https://cloud.google.com/chronicle/docs/reference/parser-syntax

Thereโ€™s also a great piece here by Chris from our org. 


https://medium.com/@thatsiemguy/understanding-chronicle-parsers-with-visualization-4ff79f674323

 

View solution in original post

5 REPLIES 5