Pfsense logs to graylogs

[derPhlipsi (Philipp Ruland)]

Hey @dj077,

take a look here regarding pfsense extractors

Rexgex Extractor - for pfsense devices

Hey, here are two solutions: Solution 1: Getting all fields: Two Extractors, first a GROK to remove syslog-header (actually, why is it in there?), second a Copy-Input with csv-converter. [image] The GROK Extractor: [image] The Copy-Input with CSV To Fields converter Note: In the field names attribute, there are 29 fields needed, since the csv is 29 columns wide. Use appropriate names if they are known for better readability. [image] This is the result: [image] Solution 2: Only 20th (n…

It seems that Graylog has some issue with the pfsense syslog format. Actually, is it syslog that pfsense is sending?

Greetings - Phil