Hi All - I just started using Graylog to log from my Cisco 3750 switches. I am getting logs and everything looks correct except the “source” shows as the month for everything. I suspect this is due to either GROK or extractors but I am not sure how to fix this. Does anyone have experience with lo…

Thank you. Adding: logging origin-id hostname to my switches fixed the issue. The only thing that doesn’t look right is that I have a : at the end of the hostname but I can live with it for now. If anyone has an idea on that one let me know, thanks!

Cisco 3750 logs showing date as source

Graylog Central (peer support)

Joel_Duffield (Joel Duffield) May 4, 2023, 1:41pm 2

This may be helpful, the Cisco’s are really weird about this for some reason Source name in the Cisco Firepower Syslog - #6 by jan

Topic		Replies	Views
How to fix source name inputs Graylog Central (peer support)	2	567	January 25, 2021
Problem with Cisco Routers / Switches with source value Graylog Central (peer support) pipeline-rules	1	2238	June 10, 2020
Source name in the Cisco Firepower Syslog Graylog Central (peer support) pipeline-rules	11	4673	November 27, 2018
Source = :[ cisco syslog, any good way of fixing this? Graylog Central (peer support) pipeline-rules	2	1198	June 9, 2021
Switch Logs message Graylog Central (peer support)	14	2500	April 11, 2019

Cisco 3750 logs showing date as source

Related topics