Hi,
I am using filebeat to collect syslog messages from cisco switches.
Right now it looks like the ios dataset parses only access-list logs and
parsing of switch logs is not yet implemented.
Please let me know if there is some work in progress to enhance cisco
iso logging. If not, I would spend some time to implement basic logs
like lineproto and link (ports).
Regards
Bernhard