# Cisco 3750 logs showing date as source

**URL:** <https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676>\
**Category:** Graylog Central (peer support)\
**Created:** [May 4, 2023, 1:29pm UTC](https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676 "2023-05-04T13:29:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zz87vq](https://avatars.discourse-cdn.com/v4/letter/z/aca169/32.png) [@zz87vq](https://community.graylog.org/u/zz87vq)\
**Post date:** [May 4, 2023, 1:29pm UTC](https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676/1 "2023-05-04T13:29:02Z")

</div>

Hi All - I just started using Graylog to log from my Cisco 3750 switches. I am getting logs and everything looks correct except the “source” shows as the month for everything. I suspect this is due to either GROK or extractors but I am not sure how to fix this. Does anyone have experience with logging this? I have searched numerous topics and can’t seem to find an answer. Here is additional info below, thanks!

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/d/db305c98ba0ac2927f8b769a615914f74491e6c3.png)

![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f1d51575638ed54f49cf521dc587606c76ea2719.png)

---

<div class="post-metadata">

**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\
**Post date:** [May 4, 2023, 1:41pm UTC](https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676/2 "2023-05-04T13:41:22Z")

</div>

This may be helpful, the Cisco’s are really weird about this for some reason [Source name in the Cisco Firepower Syslog - #6 by jan](https://community.graylog.org/t/source-name-in-the-cisco-firepower-syslog/7735/6)

---

<div class="post-metadata">

**Author:** ![zz87vq](https://avatars.discourse-cdn.com/v4/letter/z/aca169/32.png) [@zz87vq](https://community.graylog.org/u/zz87vq)\
**Post date:** [May 4, 2023, 3:06pm UTC](https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676/3 "2023-05-04T15:06:01Z")

</div>

Thank you. Adding:

logging origin-id hostname

to my switches fixed the issue. The only thing that doesn’t look right is that I have a : at the end of the hostname but I can live with it for now. If anyone has an idea on that one let me know, thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 18, 2023, 3:06pm UTC](https://community.graylog.org/t/cisco-3750-logs-showing-date-as-source/28676/4 "2023-05-18T15:06:05Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.