Fetching Cisco , Firewall logs from syslog-ng server

@tudor i finally got it:

PUT _ingest/pipeline/testpipeline
{
  "description" : "describe pipeline",
  "processors" : [
    {
      "dissect" : {
        "pattern": "/opt/%{host.name}/",
        "field": "log.file.path"
      }
    }
  ]
}

Thanks

1 Like