Hello,
I am having some parsing issues and need help.
Our system receiving the following logs:
seems like a standard logs according to my understanding.
Using the most updated live parser 'ciscorouter'.
After parsing, those are the meta keys we are seeing:
Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?
Thanks!
Shani
You are receiving this message because the message is not parsing properly and the parser does not understand the messages.
Could you please provide a few log samples and we could get those messages added to the parser?
Thanks
Dave