# Sophos XG — Partial Parsing

Recorded against /assets/index-CY6Sm-TX.js; source revision a4b4e2f; browser-observed workflow. No live target was connected.

## PARTIAL PARSING

This exercise uses two complex published Sophos X G firewall events.

## IDENTIFY SOURCE

Enter Sophos and X G Firewall to identify the example.

## PASTE BOTH EVENTS

Paste the complete unchanged sample pair, including quoted and empty values.

## RUN ANALYSIS

Analyze the source without manually removing difficult fields.

## READ THE RESULT

These source records may have recognized values and still require review.

## INSPECT UNPARSED TEXT

Read Problem to review and Text not yet assigned to fields in the normal analysis result.

## PRESERVE EVIDENCE

Keep fields that were already found. Do not force a passing total by deleting source data.

## REVIEW REQUIRED

A partial result is an honest checkpoint, not a successful native parser package.