Adding User Defined Log Parser Templates
Define a Custom Device/Application Type
The device or application type provides a logical grouping for the custom log templates that you define.
MARS uses this logical container to select which custom log templates to apply to traffic received from
a reporting device of that device type. You must perform this task before you can begin to define a
custom log parser.
Go to Admin >Custom Setup tab
Step 1
Click the User Defined Log Parser Templates
Step 2
Figure 15-1
On the next screen, click Add button which is located next to the Device/Application type list
Step 3
User Guide for Cisco Security MARS Local Controller
15-2
User Defined Log Parser Template
Chapter 15
Configuring Custom Devices
78-17020-01