sdl-log-parser
OfficialAuthor and validate SentinelOne Singularity Data Lake log parsers
AuthorSentinel-One
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill allows users to create, edit, debug, and validate SentinelOne Singularity Data Lake (SDL) log parsers. It automates the process of converting raw log samples into structured SDL parser definitions, which is essential for effective log analysis and event ingestion.
Core Features & Use Cases
- Log Parser Authoring: Converts raw log samples into structured SDL parser definitions.
- End-to-End Validation: Validates parsers by ingesting a sample through the deployed parser to confirm actual ingest path functionality.
- Use Case: A user has a raw log file from a new vendor and wants to create a parser to extract relevant fields and format them as OCSF events for ingestion into the SDL. This skill can be used to write and validate the parser without manual testing.
Quick Start
Author a parser for the raw log file 'new-vendor.log' and validate it using the sdl-log-parser skill.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferencesassets
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: sdl-log-parser Download link: https://github.com/Sentinel-One/ai-siem/archive/main.zip#sdl-log-parser Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.