Im thinking perhaps, the reason its not display is because its not catching the messages:
Here is my inputs:
I only want to extract the messages from CISCO ASA Input
Here is my configuration:
Here is a sample message for CISCO ASA logs:
Here are the extractors:
Here is the pipeline:
Here is the pipeline rule:
