I have created a new(custom) log type, Then created a custom parser for that specific log type.
When I try to parse the log on UI, I get the correct UDM mapping.
But when I try to send logs from the python script and check from Investigation > SIEM Search, i see that those logs are unparsed
The issue that i am facing is - while validating the parser, I am getting error -
Error:
No sample logs exist for this log type in the last 30 days.
Can someone please help me understand how can I make logs available for this parser to get validated?
Thanks in advance for your guidance.
