Sollution found for origin-id and some modification for regex. Br,
Ville On Wednesday, November 12, 2014 9:12:31 AM UTC+2, Ville Leinonen wrote: > > Hi, > > I have a little problem in gr2 and Cisco sw's. > I installed Cisco Catalyst (Extractor) and logs are not showing right. > > If i try raw udp i get this king of message: > message > <46>: Nov 12 04:56:23.716: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host > 10.xx.xx.xx Port 5555 started - reconnection > source > 10.xx.xx.xx > If i try syslog udp /w cc extractor i get this king of message: > facility > syslogd > level > Info [6] > local_facility > sys > local_level > 6 > message > Logging to host 10.201.81.230 Port 5555 started - reconnection > mnemonic > logginghost_startstop > source > : > full_message > <46>: Nov 12 04:56:23.716: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host > 10.201.81.230 Port 5555 started - reconnection > And as you can see source is quite strange. Any suggestion for correcting > this? > Here is Cisco log conf: > no logging message-counter sysloglogging trap debugginglogging facility > sysloglogging source-interface Vlan1logging host 10.xx.xx.xx transport > udp port 1514logging host 10.xx.xx.xx transport udp port 5555 > Regards, > Ville > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
