AnsweredAssumed Answered

Parsing Issue - ciscorouter

Question asked by Shani Amytai Employee on Feb 6, 2019
Latest reply on Feb 6, 2019 by Dave Glover

Hello,

I am having some parsing issues and need help.

 

Our system receiving the following logs: 

seems like a standard logs according to my understanding.

Using the most updated live parser 'ciscorouter'.

After parsing, those are the meta keys we are seeing:

  

 

Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?

 

Thanks!

Outcomes