Require new data type for Huawei OceanStor

Hi all,

My client wants to ingest logs from their Huawei OceanStor Pacific appliances, but there is no datatype for this log source as of now. How can I request one? And is there a "generic" data type which I can use to ingest the logs and develop a parser until a specific one has been defined?

Thanks and kind regards
Lukas

0 1 138
1 REPLY 1

You will need to create a Chronicle support ticket and request a new data label to be made. Make  sure to include a link to the product webpage and a data label suggestion. You can use any data label that is not use for your Chronicle instance until the new one is made. I've done that in the past to create the parser while waiting, but I dont  think you can move the old logs to the new data label. You can also use the chronicle cli tool to test the parser you're building against the raw logs as well.