I am having an issue with getting Filebeat with the Cisco module to process logs from my 2960X switches running version 15.2.
The switch is sending logs to Filebeat but when i run a debug I am getting an error that says
syslog/input.go:285 can't parse event as syslog rfc3164
I have a few 3850 switches running IOS version 16.3 and Filebeat is processing its logs just fine.
Any idea as to what is going on?