[rsyslog-notify] Forum Thread: Re: Property Replacer %fromhost-ip% - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26851#p26851

Message: 
----------
are you sure that what you are getting is from a cisco switch? that looks
like syslog-ng output to me (the local7.info part of it)

another thing in here is that the timestamp violates the RFCs.
We have a parser module for Cisco logs to fix up some of their issues, see
<!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/master/configuration/modules/idx_parser.html">http://www.rsyslog.com/doc/master/confi
... arser.html</a><!-- m --> and <!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/master/configuration/modules/pmciscoios.html">http://www.rsyslog.com/doc/master/confi
... coios.html</a><!-- m --> for info