FileBeat Not Processing Cisco 2960X Logs

I am having an issue with getting Filebeat with the Cisco module to process logs from my 2960X switches running version 15.2.

The switch is sending logs to Filebeat but when i run a debug I am getting an error that says

syslog/input.go:285 can't parse event as syslog rfc3164

I have a few 3850 switches running IOS version 16.3 and Filebeat is processing its logs just fine.

Any idea as to what is going on?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.