# parser: Parse and segment structured messages

The filters and default macros of AxoSyslog work well on the headers and metainformation of the log messages, but are rather limited when processing the content of the messages. Parsers can segment the content of the messages into name-value pairs, and these names can be used as user-defined macros. Subsequent filtering or other type of processing of the message can use these custom macros to refer to parts of the message. Parsers are global objects most often used together with filters and rewrite rules.

The AxoSyslog application provides the following possibilities to parse the messages, or parts of the messages, as shown on the following list. There are several built-in parsers for application-specific logs.

Note that by default, AxoSyslog parses every message as a syslog message. To disable parsing the message as a syslog message, use the `flags(no-parse)` option of the source. To explicitly parse a message as a syslog message, use the `syslog` parser. For details, see [Parsing syslog messages](../docs/axosyslog-core/chapter-parsers/parser-syslog/index.md).

* * *

[Apache access log parser](../docs/axosyslog-core/chapter-parsers/apache-access-log-parser/index.md)

[Check Point Log Exporter parser](../docs/axosyslog-core/chapter-parsers/parser-checkpoint/index.md)

[Cisco parser](../docs/axosyslog-core/chapter-parsers/cisco-parser/index.md)

[Parsing messages with comma-separated and similar values](../docs/axosyslog-core/chapter-parsers/csv-parser/index.md)

[Parsing dates and timestamps](../docs/axosyslog-core/chapter-parsers/date-parser/index.md)

[db-parser: Process message content with a pattern database (patterndb)](../docs/axosyslog-core/chapter-parsers/chapter-patterndb/index.md)

[Parsing enterprise-wide message model (EWMM) messages](../docs/axosyslog-core/chapter-parsers/parser-ewmm/index.md)

[Fortigate parser](../docs/axosyslog-core/chapter-parsers/parser-fortigate/index.md)

[group-lines parser](../docs/axosyslog-core/chapter-parsers/parser-group-lines/index.md)

[iptables parser](../docs/axosyslog-core/chapter-parsers/parser-iptables/index.md)

[JSON parser](../docs/axosyslog-core/chapter-parsers/json-parser/index.md)

[Parsing key=value pairs](../docs/axosyslog-core/chapter-parsers/key-value-parser/index.md)

[Linux audit parser](../docs/axosyslog-core/chapter-parsers/linux-audit-parser/index.md)

[MariaDB parser](../docs/axosyslog-core/chapter-parsers/parser-mariadb-audit/index.md)

[metrics-probe](../docs/axosyslog-core/chapter-parsers/metrics-probe/index.md)

[Netskope parser](../docs/axosyslog-core/chapter-parsers/parser-netskope/index.md)

[Parse OpenTelemetry messages](../docs/axosyslog-core/chapter-parsers/opentelemetry/index.md)

[panos-parser(): parsing PAN-OS log messages](../docs/axosyslog-core/chapter-parsers/panos-parser/index.md)

[PostgreSQL csvlog](../docs/axosyslog-core/chapter-parsers/postgresql-csvlog-parser/index.md)

[Python parser](../docs/axosyslog-core/chapter-parsers/python-parser/index.md)

[Regular expression (regexp) parser](../docs/axosyslog-core/chapter-parsers/parser-regexp/index.md)

[Structured data (SDATA) parser](../docs/axosyslog-core/chapter-parsers/sdata-parser/index.md)

[Sudo parser](../docs/axosyslog-core/chapter-parsers/parser-sudo/index.md)

[Parsing syslog messages](../docs/axosyslog-core/chapter-parsers/parser-syslog/index.md)

[Parsing tags](../docs/axosyslog-core/chapter-parsers/parser-tags/index.md)

[Websense parser](../docs/axosyslog-core/chapter-parsers/parser-websense/index.md)

[Windows XML Event Log (EVTX) parser](../docs/axosyslog-core/chapter-parsers/windows-eventlog-xml-parser/index.md)

[XML parser](../docs/axosyslog-core/chapter-parsers/xml-parser/index.md)

Last modified January 26, 2024: [[parsers] Minor clarification (ca856486)](<https://github.com/axoflow/axosyslog-core-docs/commit/ca85648679938c13c234b9930fc77cb0d8ea697e>)