Skip to content

Commit d8cb8df

Browse files
committed
asim/add-exclude-prefix-towatchlist
1 parent 42a7302 commit d8cb8df

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/sentinel/normalization-manage-parsers.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -88,16 +88,16 @@ To modify an existing, built-in source-specific parser:
8888

8989
1. Add a record to the `ASim Disabled Parsers` watchlist.
9090

91-
1. Define the `CallerContext` value with the names of any unifying parsers you want to exclude the parser from.
91+
1. Define the `CallerContext` value as `Exclude<parser name>`, where `<parser name>` is the name of the unifying parsers you want to exclude the parser from.
9292

93-
1. Define the `SourceSpecificParser` value with the name of the parser you want to exclude, without a version specifier.
93+
1. Define the `SourceSpecificParser` value `Exclude<parser name>`, where `<parser name>`is the name of the parser you want to exclude, without a version specifier.
9494

9595
For example, to exclude the Azure Firewall DNS parser, add the following records to the watchlist:
9696

9797
| CallerContext | SourceSpecificParser |
9898
| ------------- | ------------- |
99-
| `_Im_Dns` | `_Im_Dns_AzureFirewall` |
100-
| `_ASim_Dns` | `_ASim_Dns_AzureFirewall` |
99+
| `Exclude_Im_Dns` | `Exclude_Im_Dns_AzureFirewall` |
100+
| `Exclude_ASim_Dns` | `Exclude_ASim_Dns_AzureFirewall` |
101101
| | |
102102

103103
### Prevent an automated update of a built-in parser

0 commit comments

Comments
 (0)