Hi Matt, the Grok pattern "CISCOFW302020_302021" is simply invalid (missing a closing parenthesis) at least according to the error message you've posted. Could you please post the complete Grok patterns so that we can take a look at them?
Cheers, Jochen On Tuesday, 17 May 2016 15:04:19 UTC+2, Matt Zarba wrote: > > Hello, > > I just built a new server with Graylog 2.0 and now I cant import the cisco > asa grok patterns. It only imports part of the pattern. This same list > worked fine before I rebuilt the server. I saw a couple of articles talking > about whitespace breaking the patterns, but i could not figure out how to > fix this problem. > > > This picture shows the patterns that were imported. As you can see they > are only importing part of the pattern. > > > <https://lh3.googleusercontent.com/-GwyMdabInII/VzsV7wAr-zI/AAAAAAAALxU/YyECSrezYwUiEvjSZx3cCZMAm5DjtdILwCLcB/s1600/cisco%2B1.PNG> > > > > When I tried to import the list I would get these errors in the chrome > console(network tab). Notice how it sees the : after the ? as the end of > the pattern. > > > > <https://lh3.googleusercontent.com/-y7cPdCixVSg/VzsWLOFHjqI/AAAAAAAALxY/pFYklPQS0EAID2Q7J_Jng7pmiEftlLR2wCLcB/s1600/cisco%2B2.PNG> > > > Any help would be appreciated. > > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/21bbdce6-2e53-4a9b-aeb4-6136127ecafd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
