Hello friends, I come from here asking for help from experts. I have two firewalls with “syslog/udp” configured. Sophos19 and FortNet7.2 I realized that when FortNet received the logs, it was not necessary to configure extractors to get the fields all separated in an organized way. However, Soph…

Hello, @s0p4L1N Grateful! With a little modification I was able to resolve both Sohpos syslog issues: rule "Firewall Syslog Parser" when has_field("message") and contains(to_string($message.message),"device_name=\"SFW\"") and from_input(id:"64d658ba5c1b4b3b03d8741f") == true then set_fiel…

Syslog format does not follow recommendation

Graylog Central (peer support)

s0p4L1N (S0p4L1N) September 8, 2023, 12:33pm 17

@isotecviac2022 check this post: Rename Multiple Fields Using Pipeline Rule

1 Like

Topic		Replies	Views
Incorrect Timestamp on logs recieved SYSLOG UDP Graylog Central (peer support)	3	7809	December 5, 2017
How to correct syslog input that is missing timezone data? Graylog Central (peer support) pipeline-rules	3	1558	June 21, 2020
Fortinet, syslog timestamp timezone set wrong Graylog Central (peer support)	6	4755	January 17, 2018
Timestamps different on multiple devices Graylog Central (peer support)	3	1902	June 2, 2017
Syslog Timestamps Graylog Central (peer support) pipeline-rules	4	1258	December 14, 2020

Syslog format does not follow recommendation

Related Topics