Parse and redact logs

Open Pipelines in Telemetry settings and choose New pipeline. Select logs, add a bounded filter and choose the parser processor for your format. Test representative safe samples, including unmatched input and malformed lines, before saving.

Pipeline order and processor order matter. Preview diagnostics show failures as well as matches, so confirm each field was actually extracted. Default privacy redaction runs first.

Parsers created with the legacy /log_parsers endpoint are not converted, so recreate each one as a pipeline. A new parser does not rewrite retained records. See Processing pipelines for parser formats, the API, limits and safe rollout.