Im struggling to parse the following ciscoasa message with the ESI tool.
Oct 14 21:42:26 172.19.46.1 :%ASA-svc-4-722037: Group User IP <126.96.36.199> SVC closing connection: Transport closing.
I can define the header in the ESI 1.2.1 tool but it subsquently fails to match the header.
Playing around I think the problem is the colon follow directly by the percent character. (:%)
Can anyone help?