Parsing Issue - ciscorouter
I am having some parsing issues and need help.
Our system receiving the following logs:
seems like a standard logs according to my understanding.
Using the most updated live parser 'ciscorouter'.
After parsing, those are the meta keys we are seeing:
Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?
- Community Thread
- Forum Thread
- log parsing
- parser cisco catalyst
- RSA NetWitness
- RSA NetWitness Platform
You are receiving this message because the message is not parsing properly and the parser does not understand the messages.
Could you please provide a few log samples and we could get those messages added to the parser?