Hi All - I just started using Graylog to log from my Cisco 3750 switches. I am getting logs and everything looks correct except the “source” shows as the month for everything. I suspect this is due to either GROK or extractors but I am not sure how to fix this. Does anyone have experience with lo…

Thank you. Adding: logging origin-id hostname to my switches fixed the issue. The only thing that doesn’t look right is that I have a : at the end of the hostname but I can live with it for now. If anyone has an idea on that one let me know, thanks!

Cisco 3750 logs showing date as source

Graylog Central (peer support)

Joel_Duffield (Joel Duffield) May 4, 2023, 1:41pm 2

This may be helpful, the Cisco’s are really weird about this for some reason Source name in the Cisco Firepower Syslog - #6 by jan

Topic		Replies	Views
How to fix source name inputs Graylog Central (peer support)	3	546	February 8, 2021
Problem with Cisco Routers / Switches with source value Graylog Central (peer support) pipeline-rules	2	2204	June 24, 2020
Source name in the Cisco Firepower Syslog Graylog Central (peer support) pipeline-rules	12	4590	December 11, 2018
Source = :[ cisco syslog, any good way of fixing this? Graylog Central (peer support) pipeline-rules	3	1170	June 23, 2021
Switch Logs message Graylog Central (peer support)	15	2394	April 25, 2019

Cisco 3750 logs showing date as source

Related topics