Mosstrow

Hello @mstopa-splunk , The fix was based on incomplete payload which result in an incorrect hostname extraction. Here is a payload captured with tcpdump: 290692: HOSTNAME RP/0/RSP0/CPU0:Mar 19 15:47:02.754 :...

Hi @mstopa-splunk Sorry for the late reply. The problem persists, but it's related to the fact that our switch's host name contains an underscore. `echo "290692: HOST_NAME RP/0/RSP0/CPU0:Mar 26 14:47:02.754...

@mstopa-splunk I've tested it in the LAB and it works very well Good job!