how to create choice in netwitness log parser tool

Could you point me in the direction of how to write a parser for logs files that are in JSON format?

I understand finally what the difference between a filespec and parser is. thanks.

Thanks you Dave, really appreciate this content.

Thank you for helping to close the skill gap :)

As of he wasn't talented enough, he can write backwards too...

Great job Dave. Thanks for the walk-through.

Hi Dave! I have to parse a log, where the message part contains more attributes that can be longer than one word long, and the word separation is a space. In all of your videos, you only select one word to create a variable, but in my usecase, my variables have to be more than one word. Is there a way to parse this effectively?

How do you include position information with respect to other variables Eg.what if I get two MD5 values in single log or two IP in single log

Keep on posting good work!!

Learned something new. Thanks Dave.

Thank you Dave. Very informative and useful. Looking forward to the next in the series. Gratefully.

Great stuff! Waiting for a complete RSA Netwitness Playlist.

Thanks Dave... very helpful.

thanks, Dave , I've created a parser and deployed with the help of your video

I have created a enrichment list, I want if device.ip=to that enrichment ... could you please help me with query that need to be placed there

Waiting for this only

Excellent Glover style walkthrough! When is NW going to have a nice sso option, like SAML, to authenticate and assign role mappings, rather than Kerberos? Nice thing about using sso option is the IdP can also handle any MFA, automagically baking it into the NW security process.

Dave can u please send the link for reference I'd list with description. Thanks

Hi Dave......Could you please share the Part 2

Thanks Dave.

Thanks Dave! Your video help me a resolve a issue.

Thanks Dave! Very helpful video!

Thanks Dave! Very Informative! Do you work for RSA?

Thanks Dave, brilliant as always. Very helpful!