Parser Validation Error

Hi @JMon38, at first glance it looks like the errors are all related to validation rather than parsing.  In that regard I wanted to send over our docs for troubleshooting validation errors, and I'm sure that there will be other commentary here in the community that will guide you in the right direction.

https://cloud.google.com/chronicle/docs/event-processing/parser-tips-troubleshooting#troubleshoot_validation_errors

Hi ​@JMon38 ,validation errors usually occur when the parser sets enumerated (enum) UDM fields without meeting all their required dependencies.
Example :
event_type
security_result.severity
security_result.action

have mandatory companion UDM fields that must also be populated. If an enum value is assigned but one or more dependent UDM fields are missing or conditionally skipped in the parser logic, Chronicle raises a validation error.Ensure that whenever an enum UDM field is set, all required dependent UDM fields are consistently populated within the same parser condition.