AnsweredAssumed Answered

Struggling to Parse a ciscoasa message

Question asked by David Waugh on Oct 20, 2017
Latest reply on Oct 20, 2017 by Eric Partington

Hello

 

Im struggling to parse the following ciscoasa message with the ESI tool.

 

Oct 14 21:42:26 172.19.46.1 :%ASA-svc-4-722037: Group User IP <1.2.3.4> SVC closing connection: Transport closing.

 

I can define the header in the ESI 1.2.1 tool but it subsquently fails to match the header.

Playing around I think the problem is the colon follow directly by the percent character. (:%)

 

Can anyone help?

Outcomes