# Error with Cisco module for filebeat

**URL:** https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920
**Category:** Beats
**Tags:** beats-module, filebeat
**Created:** [May 22, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920 "2020-05-22T14:54:22Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Nazarenko](https://avatars.discourse-cdn.com/v4/letter/n/b38774/32.png) [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)
#### Post date: [May 22, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920/1 "2020-05-22T14:54:22Z")

</div>

Hello everyone, i have problem with module cisco for filebeat. I get message from cisco devices, but in kibana i see this message:

> error.message GoError: could not find delimiter: `: ` in remaining: `User 'user1' authentication for SSH2 Session from 192.168.222.12 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded`, (offset: 51)

/etc/filebeat/modules.d/cisco.yml:  
 ![Снимок экрана от 2020-05-22 17-40-21](https://us1.discourse-cdn.com/elastic/original/3X/8/7/87dc5fd640e235a7d4d68536b4c78cd7e0bf10a4.png)  
i hope to your help 🤚

---

<div class="post-metadata">

### Author: ![Andre\_Letterer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andre_letterer/32/42248_2.png) [@Andre\_Letterer](https://discuss.elastic.co/u/Andre_Letterer)
#### Post date: [May 29, 2020, 12:12am UTC](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920/2 "2020-05-29T00:12:38Z")

</div>

Hi Иван,

Could you please add a bit more context around this error message?  
If you want you can enable debug messaging:

```auto
filebeat -c <configname>.yml -e -d '*' >filebeat.debug 2>&1

```

[https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-)  
cisco.html#\_ios\_fileset\_settings

It's possibly happening in the script processor file here `module/cisco/ios/config/pipeline.js `

My assumption is that this is happening somewhere in dissect processor, but without more error error context or having the original message it will be difficult to test here or judge what is going wrong.  
Please use code blocks for showing the complete error message.

André - Андрей 😉

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 26, 2020, 2:12am UTC](https://discuss.elastic.co/t/error-with-cisco-module-for-filebeat/233920/3 "2020-06-26T02:12:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.