First of all, please format your post (code blocks) so that it is easier to read and troubleshoot.
Secondly, if you could provide clarity about what is the issue that you are facing it would allow us to help you easily.
Lastly the config that you have already in place looks good enough and is able to parse the data. One suggestion I would make is that there is no need to assign the match of %{SYSLOGPROG} to logdata. You will only add a redundant field called logdata as by default %{SYSLOGPROG} will add a field called program.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.