Hello
Im struggling to parse the following ciscoasa message with the ESI tool.
Oct 14 21:42:26 172.19.46.1 :%ASA-svc-4-722037: Group User IP <1.2.3.4> SVC closing connection: Transport closing.
I can define the header in the ESI 1.2.1 tool but it subsquently fails to match the header.
Playing around I think the problem is the colon follow directly by the percent character. (:%)
Can anyone help?
Can you paste your HEADER and MESSAGE so we can see what is not working for you?