[syslog-ng] cisco rewrite code
bazsi77 at gmail.com
Fri Oct 12 18:48:25 CEST 2012
The best would be to write a cisco mnemonic parser that would transform that stuff to name-value pairs.
Also we've used the program name portion in patterndb to parse out those. iirc it starts with %
----- Original message -----
> Does anyone have a pre build set of patterns/rewrite rule to rewrite all
> cisco logs into something that is a little more compliant?
> We are trying to use a master pattern database to identify/classify
> messages, but the cisco logs don't have usable "program names" so the
> pattern database can't even get started :-(
> Thanks for any pointers.
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the syslog-ng