Observed arrival · 2026-10-13
Parsleaf turns sample logs into SIEM parsers
Parsleaf generates a SIEM parser from sample log lines, then uses errors from the SIEM’s validator to help repair it.
- For
- Google SecOps teams building or repairing log parsers
- Worth noticing
- Five repair rounds are included; Sentinel, Splunk, and Elastic are described as future additions, not current support.
Field notes
The walkthrough starts with roughly twenty mixed-event lines and shows a FortiGate traffic record mapped into Google SecOps UDM fields. Its repair loop sends validator errors back for another pass, with five rounds included in the listed per-parser price. The page says identifiers are masked before an AI model sees a line and retained only for the session; those data-handling details are stated claims. Google SecOps is the current offering, while three other SIEMs are presented as future additions.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue