# Snort 3 — ChatGPT-Assisted Review

Recorded against /assets/index-CY6Sm-TX.js; source revision a4b4e2f; browser-observed workflow. No live target was connected.

## UNKNOWN FORMAT

Here is a published Snort three alert fast event, used as a difficult parsing example.

## SET PRODUCT IDENTITY

Enter Snort as the manufacturer and Snort three as the product.

## PASTE ALERT

Paste the complete alert source without changing the source text.

## RUN ANALYSIS

Analyze the event and review any fields that remain unparsed.

## DO NOT GUESS

If the result is incomplete, keep the event and its unparsed regions.

## OPEN CHATGPT ASSISTANCE

Open Fix with ChatGPT. The prompt may contain original log values.

## COPY PROMPT MANUALLY

Review the privacy warning, prepare the prompt and use Copy Prompt only if sharing is authorized.

## CHECK INDEPENDENT SAMPLES

Paste a reviewable JSON result back into Parser Studio, then test separate holdout examples.

## VERIFY BEFORE APPLY

A review-only recipe never proves success by itself. Approve only a tested and complete fix.