Logstash 6.4.2 parse Cisco ASA Log

Elastic Stack Logstash
1

i have a syslog server with my asa's log, and i installed filebeat agent on it, then i can see asa's log on my logstash. now i don't create any filter on my logstash . on elk. picture as below

image
image.png1230×499 27.3 KB

and who can tell me how to create filter rules on logstash? i want to see the firewall session count timely

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.