I had integrated Aruba Networks Mobility Controller and getting the below logs but they are not getting parsed under the right meta key. I had also applied the updated Aruba parser on the Log Decoder. By the default the logs are going under ciscorouter parser then I mapped the IP address of the aruba controller to arubanetworks parser but then the message isn't parsing.
This is the raw log file.
: date=2016-03-10 time=14:40:29 device_id=EliteAC logid=02 protocol=tcp dst_port=80 clientip=22.214.171.124 username=97xxxxxx85 liveip= macaddress=f0:5b:7b:7c:41:5f sitename=media1.popsugar.com url=http://media1.popsugar-as.com
Could someone suggest me how I can get the details of these logs under the right field. Thanks.