Cisco Meraki Log Parsing


I am having a bit of trouble parsing the following log from my cisco meraki mx64 in Graylog v3.0.1+de74b68:

<134>1 1554527374.766296981 Gateway urls src= dst= mac=9C:E0:63:06:89:CC agent=‘Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36’ request: GET

i can get the device, logtype, src, dst, mac, agent to show as separate fields but am having trouble getting the start of the log and the “request:” data to parse out. anyone have any ideas?

Please show your current pattern

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.