Skip to content

Infoblox nios wrong syslog parsing #23272

Closed
@adriansr

Description

For confirmed bugs, please report:

  • Version: 7.9+
  • Operating System: -
  • Discuss Forum URL: -

The infoblox/nios dataset can't parse logs in the following format:

Mon Day hh:mm:ss ip service[pid]: [...]

It works if a hostname is added before the IP address:

Mon Day hh:mm:ss hostname ip service[pid]: [...]

This is due the conflicting ordering of headers in the original device parser:

https://github.com/adriansr/nwdevice2filebeat/blob/1c1d0f6610f5d0e7b859dd4c81130012a49dcafb/devices/infobloxnios/infobloxniosmsg.xml#L12-L20

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions