splunk-connect-for-syslog icon indicating copy to clipboard operation
splunk-connect-for-syslog copied to clipboard

CISCO SD WAN filter

Open gshahspl opened this issue 3 years ago • 1 comments

Need a filter created for this vendor (not known) data is being logged with sourcetype:fallback

Cisco ASR1002-X router running IOS version 17.3.4a

metafile: EXPOSE 1515/udp cisco_sd_wan,index,firewall_sdwan cisco_sd_wan,sourcetype,netflow-vs9

gshahspl avatar Apr 26 '22 22:04 gshahspl

@gshahspl Can you please add redacted raw log smaple here

nandinivij avatar May 02 '22 20:05 nandinivij

@gshahspl, We didn't hear anything from you on this issue. We are closing this issue for now.

Feel free to reach out in case of any further queries.

bparmar-splunk avatar Jan 04 '23 09:01 bparmar-splunk