ingest logs that are not supported

[Jay_Tee]

Hi Experts,

Are we able to ingest logs that are not indicated in the log type?

https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers

[dnehoda]

No you cannot - misspoke on my last post 

[Jay_Tee]

Base on the screenshot, which log type selection should I select?

[jstoner]

Every log source needs to be assigned to a log type. By default that log type is then associated with a default parser. That parser can be overridden either through a parser extension or a bespoke parser that a customer/parter crafts. 

if you need a log type that is not listed you can open a ticket and request a new log type to be created. 

Hope this helps!

[deeshu]

Ingest- yes you can. Use any log_type which you think can match at some extent. This is not advisable approach but you can adopt it if you don't have the time to wait to get the appropriate log_type created from Support, then integrate, and then start creating the custom parser.