Hi all,
i have our cisco ASA firePOWER module sending syslog to our graylog instance and ive setup email alerts. the alerts are coming through and ive passed some message variables which work but it seems that all my extractors which are based on grok patterns dont allow me to pass these to the email. any thoughts?
Thanks