Hi Israel, Cisco appliances often don't send valid syslog messages (RFC 3164 or RFC 5424) so that you have to use a Raw/Plaintext input instead of a Syslog input and extract the information you need either with extractors <http://docs.graylog.org/en/2.1/pages/extractors.html> or with rules of the message processing pipeline <http://docs.graylog.org/en/2.1/pages/pipelines.html>.
There are also ready-to-use content packs on the Graylog Marketplace simplifying the setup: https://marketplace.graylog.org/addons?tag=cisco Cheers, Jochen On Monday, 5 September 2016 09:30:15 UTC+2, Israel Martinez Bermejo wrote: > > Hello guys. > > I have configurated grayog with alls switches Extreme Networks and work > fine. > > But now, I am working with Cisco Router but have the problem in source > message, not put the IP or hsotname Cisco, it start with month, for example > now is Sep. > > I show an example: > > > > > <https://lh3.googleusercontent.com/-hjqcw2B9XTk/V80ewn27QxI/AAAAAAAAAPo/fKsSyh5ay3kaBoczWyK00SMgPRW0-qxlQCLcB/s1600/error%2Bsource.jpg> > > > Thans very much! > > > Regards. > > Israel. > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/8e31ec4b-d641-4458-a9f3-a30261005cce%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
