Install Content from Content Hub
What is Content Hub?
Content Hub provides pre-built pipeline templates for common device types and vendors. Templates handle log parsing, data extraction, field normalization, and format transformation for sources such as Cisco, Palo Alto, Microsoft, and others.
Browse Content Hub
-
Navigate to Content Hub
- From the sidebar: Content Hub
-
Understand the Layout
- Left sidebar: Filters for Device type, Target, and Device vendor
- Search box: Find templates by name or keyword
- Main area: Template cards showing available pipelines
- Template cards: Show name, description, and installation status (with an Installed indicator for already-installed templates)
-
Filter Templates for Your Setup Since you created a Syslog device and File target, filter accordingly:
- Device type: Select "Syslog"
- Target: Check "File"
- Device vendor: Check your device manufacturer if available
Find the Right Template
-
Review Available Templates
- Look for templates that match your syslog source
- Common options include generic syslog parsers, network device templates (Cisco, Juniper), and security device templates (Palo Alto, Fortinet)
-
Examine Template Details Click on a template card to view its detail page with the following tabs:
- General Overview: What the template does, supported device types, and processors used
- Pipeline Overview: Processing logic and child pipelines (read-only until installed)
- Route Overview (if available): Advanced route configuration included with the template
- Log Transformation Overview: Before/after examples of data transformation
- License Details: Template license information
Install Your First Template
Select a template that matches your actual syslog source. Choosing the wrong template results in incorrect parsing. If unsure, start with a generic syslog parser.
-
Select a Template
- Choose a "Generic Syslog" or "Network Device" template
- Click on the template card to view details
-
Install the Template
- Click
Install content pack (top right) - If the template has dependencies or includes an advanced route, a configuration modal appears. Otherwise, the template installs immediately.
- Click
-
Handle Dependencies (if prompted)
- Required dependencies are automatically included and cannot be deselected
- Optional dependencies can be selected or deselected as needed
- Click
Install to proceed
-
Verify Installation
- You are redirected to the installed pipeline's detail page
- The template card on the Content Hub overview now shows an Installed indicator
- The install button is replaced by an
Actions menu with options such asSee installed pipeline andManage dependencies
What's Next?
Your processing pipeline is now ready to transform raw syslog data into structured, standardized format. Next, we connect everything together so data flows from your device through the pipeline to your target.
Next: Connect Everything with Routes to create the data flow path.