Hey. I Want to find messages on Port security in the logs, according to the message ‘HAVEMAC’, I tried different combinations of words, but could not find the log information I needed (see screen)
How can I find all messages with ‘HAVEMAC’?
he @tetesh
/.+HAVEMAC.+/
You want to do a regex search
https://docs.graylog.org/en/3.2/pages/searching/query_language.html
I really recommend to fix the messages - It looks like you send in Cisco Logs that are not seen right - see the month as source field.
See my post about that topic: https://jalogisch.de/2018/working-with-cisco-asa-nexus-on-graylog/
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.