List Decoders¶

Purpose¶

The Decoders module manages expressions/parsers that help correctly understand log formats from different systems such as: sshd, apache, suricata, nginx, windows, etc...

Features¶

Display list of running decoders.
Allow adding, editing, deleting decoders.
Support mapping log fields to standard structure for easy querying.

Applications¶

Ensure logs are parsed correctly, avoid missing important fields.
Support writing decoders for new log sources.