# ASA Grok Failure ASA-4-113019
**URL:** https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976
**Category:** Logstash
**Created:** [May 11, 2020, 10:05am UTC](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976 "2020-05-11T10:05:20Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@pankaj](https://discuss.elastic.co/u/pankaj)
#### Post date: [May 11, 2020, 10:05am UTC](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976/1 "2020-05-11T10:05:20Z")
I am trying to parse and index the cisco asa logs for particular syslog messages . The grok debuger showing the code okay but I dont see the logs indexed in elasticsearch
Regards
Pankaj
---
### Author:  [@pankaj](https://discuss.elastic.co/u/pankaj)
#### Post date: [May 11, 2020, 10:12am UTC](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976/2 "2020-05-11T10:12:45Z")
Here is my code .
# =================code============================================================ #If CiscoTag is ASA-4-113019 - if [type] == "cisco-fw" and [ciscotag] == "ASA-4-113019" { grok { match =\> ["cisco\_message", "Group = %{GREEDYDATA:group}, Username =%{GREEDYDATA:user}, IP = %{IP:src\_ip}, (?%{WORD} %{WORD}). Session Type: %{GREEDYDATA:type}, Duration: %{GREEDYDAT A:duration}, Bytes xmt: %{GREEDYDATA:xmtbytes}, Bytes rcv: %{GREEDYDATA:rcvbytes}, Reason: %{GREEDYDATA:reason}"] } }
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 8, 2020, 10:12am UTC](https://discuss.elastic.co/t/asa-grok-failure-asa-4-113019/231976/3 "2020-06-08T10:12:53Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.