I defined the logging config in Cisco Router ,and let it send syslog to Graylog-server whit it’s hostname
the source field should be a hostname in my inputs ,but it showshostname + “:” as below picture:
Maybe it’s caused by Cisco Router syslog format, so I think change the format is impossible.
Could you tell me any other way?
jochen
(Jochen)
2
You can use a Regex extractor or the regex()
pipeline function to clean up the source
field of your messages.
Hi,
I create a Regex extractor as below then solved it,Thank you very much~!
system
(system)
Closed
4
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.