How delete the colon from source(hostname)

Graylog Central (peer support)
1

I defined the logging config in Cisco Router ,and let it send syslog to Graylog-server whit it’s hostname

the source field should be a hostname in my inputs ,but it showshostname + “:” as below picture:

image
image.png1401×427 17.6 KB

Maybe it’s caused by Cisco Router syslog format, so I think change the format is impossible.
Could you tell me any other way?

2

You can use a Regex extractor or the regex() pipeline function to clean up the source field of your messages.

3

Hi,
I create a Regex extractor as below then solved it,Thank you very much~!
image