[filebeat ASA Module] outbound traffic log is parsed in reverse for the source and destination IP

[Keunwoo_Lee]

Hi.

I am collecting logs using the cisco asa module, and the outbound traffic log is parsed in reverse for the source and destination IP.

eg) DNS query traffic

elasticsearch 8.8.1
kibana 8.8.1
filebeat 8.8.2

/modules.d/cisco.yml

- module: cisco
  asa:
    enabled: true

    var.syslog_host: 0.0.0.0
    #var.internal_zones: [ "Internal" ]
    #var.external_zones: [ "External" ]
    #var.timezone_offset: UTC

Any help please?

[leandrojmp (Leandro Pereira)]

You need to open an issue in the beats repository as this needs to be fixed in the module itself.