What is the purpose of a parser extension in Google SecOps?

AIt replaces the default parser permanently

BIt extends an active default or custom parser to extract or map additional values

CIt reparses all historical raw logs for a source

DIt creates a new UDM field type

Related Questions

A security engineering team has a custom application that must send telemetry directly into Google S...

easy

Which statement about Google SecOps parser extensions is correct?...

medium

Before validating a parser extension, what prerequisite must be met?...

medium

A team creates a parser extension today and expects six months of previously ingested raw logs to be...

medium

A parser extension extracts a value that does not fit any standard UDM field. Where should the engin...

hard

View all Data management questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.