Our parsing rule is meant to pull important values from unstructured logs and turn them into JSON using Regex groups. 

Make sure to add your sample log, which will be the unstructured log. It’s important to remember this will be a rule in a series of rules, so giving clear names and descriptions, setting up the source and destination fields, and establishing the regular expression are vital.