Cisco Meraki Log Parsing

Graylog Central (peer support)
1

Hello,

I am having a bit of trouble parsing the following log from my cisco meraki mx64 in Graylog v3.0.1+de74b68:

<134>1 1554527374.766296981 Gateway urls src=10.10.11.188:46301 dst=172.217.0.3:80 mac=9C:E0:63:06:89:CC agent=‘Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36’ request: GET http://connectivitycheck.gstatic.com/generate_204

i can get the device, logtype, src, dst, mac, agent to show as separate fields but am having trouble getting the start of the log and the “request:” data to parse out. anyone have any ideas?

2

Please show your current pattern

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.