I did get an answer elsewhwere. Thought I should share it here. Short version is Sentinel has no built in tool for editing parser files. You have to install one (VSC in my case) and then add Azure and Log Analytics plug ins. Here's the long version: https://learn.microsoft.com/en-us/answers/questions/2259340/ms-sentinel-cisco-meraki-(using-rest-api)-data-con?page=1#answer-2023676
... View more