AnsweredAssumed Answered

Parsing Issue - ciscorouter

Question asked by Shani Amytai Employee on Feb 6, 2019
Latest reply on Feb 6, 2019 by Dave Glover


I am having some parsing issues and need help.


Our system receiving the following logs: 

seems like a standard logs according to my understanding.

Using the most updated live parser 'ciscorouter'.

After parsing, those are the meta keys we are seeing:



Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?