CISCO ASA Extractor

Content Pack

Tested and working with a raw/plain text input source

noktork

free!

Download from Github View on Github 0 6

Published

22 Apr 18:43

Last Push

22 Apr 18:40

Marketplace Rating

Discussion

3 Comments

Your Rating

Please sign in to rate this add-on.

Comments

noktork over 4 years ago

it really is a pain not to be able to edit your comments, this is the real line:

logging host interface ip-of-graylog-server udp/port-id-of-configured-graylog-input

noktork over 4 years ago

my tags were deleted, this is what i tried to do on last input:

logging host ip-of-graylog-server udp/port-id-of-configured-graylog-input

noktork over 4 years ago

Hi!
Follow these steps to make this extractor work.

1) Start a new "raw/plain text UDP" input source
2) Configure your cisco ASA with the following:

logging enable
logging timestamp
logging buffered informational
logging trap informational
logging asdm informational
logging device-id hostname
logging host udp/

Please sign in to comment.

Back to listing