I created a custom parser for OCSF and made it active. When I tried to create a new custom parser, I received the message, "A custom parser already exists for this log source. Do you want to inspect that?"
Can I have multiple custom parsers for the same log source, or is it restricted to just one?
Any guidance or help would be greatly appreciated.