Hello friends, I come from here asking for help from experts. I have two firewalls with “syslog/udp” configured. Sophos19 and FortNet7.2 I realized that when FortNet received the logs, it was not necessary to configure extractors to get the fields all separated in an organized way. However, Soph…

Hello, @s0p4L1N Grateful! With a little modification I was able to resolve both Sohpos syslog issues: rule "Firewall Syslog Parser" when has_field("message") and contains(to_string($message.message),"device_name=\"SFW\"") and from_input(id:"64d658ba5c1b4b3b03d8741f") == true then set_fiel…

Syslog format does not follow recommendation

Graylog Central (peer support)

s0p4L1N (S0p4L1N) September 8, 2023, 12:33pm 17

@isotecviac2022 check this post: Rename Multiple Fields Using Pipeline Rule

1 Like

Topic		Replies	Views
Incorrect Timestamp on logs recieved SYSLOG UDP Graylog Central (peer support)	3	8216	December 5, 2017
Problem with syslog formating Graylog Central (peer support)	2	74	July 29, 2024
How to correct syslog input that is missing timezone data? Graylog Central (peer support) pipeline-rules	3	1674	June 21, 2020
Fortinet, syslog timestamp timezone set wrong Graylog Central (peer support)	6	4934	January 17, 2018
Timestamps different on multiple devices Graylog Central (peer support)	3	1965	June 2, 2017

Syslog format does not follow recommendation

Related topics