# Scaling with many custom log patterns

**URL:** <https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450>\
**Category:** Logstash\
**Created:** [August 26, 2020, 12:34pm UTC](https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450 "2020-08-26T12:34:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pcosic](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pcosic/32/90827_2.png) [@pcosic](https://discuss.elastic.co/u/pcosic)\
**Post date:** [August 26, 2020, 12:34pm UTC](https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450/1 "2020-08-26T12:34:26Z")

</div>

Hi Community,

I'm wondering how would we write a filter with logs from a firewall like cisco asa with thousands of custom logs?  
Currently in the filebeat module for cisco there are supported 150 cisco asa log id's.  
If we would as example filter all cisco asa logs completely (2290) in logstash, how would this work?  
Do we do one after another with dissect and grok?  
Or is there another solution  
Maybe am I here on the wrong track and it is not so complicated?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 23, 2020, 12:34pm UTC](https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450/2 "2020-09-23T12:34:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.