I,ve got Graylog 3.1.2. I’m trying to setup a syslog for cisco router (Cisco IOS Software, 7200 Software, Version 15.2). I’ve upploaded Content Pack “Cisco Switches And Routers”. In Input CISCO_IOS_SYSLOG I see log messages from cisco router which are splitted into parts – each part of origional cisco log message became separate log message in Graylog, because the origional cisco log messages are multi-lined and got CR/LF delemiter for parts. But I would like to get the whole messages instead of parts.
Which could be the best solutions for handling multi-lined logs with Graylog. To have Logstash (or something else) before Graylog to merge multi-line logs? Or may be there is native technology in Graylog?