Skip to main content

Inspect log parsers

Compare representative source text with the structured record authored for each parser.

How to use this explorer

Move between stages with the arrows or the numbered stage list. Each stage shows the input it receives on the left and the output it produces on the right, with the lines that changed marked. The configuration that makes the change sits below the comparison, and the final stage shows the complete pipeline.

The 6 stages in order

  1. Original Input
    Raw log data from multiple sources in different formats
  2. Format Detection
    Apply the authored content checks and add a candidate format label.
  3. JSON Log Parsing
    Parse JSON application logs with timestamp normalization and field validation
  4. CSV Data Parsing
    Parse CSV sensor data with column mapping, type conversion, and validation rules
  5. Access Log Parsing
    Apply one authored access-log pattern and map selected client and request fields.
  6. Syslog Message Parsing
    Parse RFC3164 syslog messages with priority decomposition and severity classification

Interactive pipeline

LOG PARSERS

Curated format comparison

Stage 1 of 6

Original Input

Raw log data from multiple sources in different formats

0HighlightsAuthored emphasis only—not a computed diff.
Copy & download

Input

{"timestamp": "2025-10-20T14:23:45.123Z","level": "error","service": "api","message": "Database connection failed"}

Output

{"timestamp": "2025-10-20T14:23:45.123Z","level": "error","service": "api","message": "Database connection failed"}
Partial snippet01-original-input.yaml
pipeline:
  processors: [] # Raw mixed-format input; no parsing yet