I need the switch logs to be displayed separately like in the image the whole message field is combined . can i split that message into different fields ?
message : the exact message looks like this :
10.41.0.3 Feb 21 17:06:14 local7 notice 974 Feb 21 17:10:25.394: %SYS-5-CONFIG_I: Configured from console by vty1 (10.41.0.244)
I need to customise it to something like this.
message : Configured from console by vty1 (10.41.0.244)
Ip address: 10.41.0.3
timestamp : Feb 21 17:06:14
priority: info,notice etc
i am using file beat as an agent to ship logs