1
00:00:01,056 --> 00:00:06,264
A single security product sends traffic, web filtering and I P S events.

2
00:00:06,916 --> 00:00:10,780
Enter Fortinet and FortiGate as the parser identity.

3
00:00:11,448 --> 00:00:16,656
Click Add Another Log Type so traffic and threat records can be reviewed
independently.

4
00:00:17,294 --> 00:00:22,598
Name the log types Traffic and Threat, then paste two real source events into each
group.

5
00:00:23,250 --> 00:00:27,738
Analyze the combined four-event sample. Do not omit an event shape.

6
00:00:28,396 --> 00:00:33,052
Read the result for all four events and confirm every type is represented.

7
00:00:33,713 --> 00:00:37,769
Review extracted values from both traffic and threat records.

8
00:00:38,424 --> 00:00:44,448
Map the original fields to Stellar Cyber seven point zero targets without discarding
vendor fields.

9
00:00:45,118 --> 00:00:49,486
Continue to Create Parser only when a shared parser draft is supported.

10
00:00:50,144 --> 00:00:54,152
Run the final sample test on all submitted events before downloading.

11
00:00:54,805 --> 00:00:59,605
Download the tested draft, then verify separately in your target runtime.

12
00:01:00,267 --> 00:01:06,795
The downloadable sample contains the original published Traffic, Web Filter and I P S
examples.