parsing

noun

The second segment of the data pipeline, during which event processing occurs.

Once data has been parsed, it moves to the next segment of the pipeline, indexing.

Parsing can occur on either an indexer or a heavy forwarder.

For more information

In the Distributed Deployment Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time