Add Extractor for msg_id: 1BFF-0015 - Githubissues

ThoZed / graylog-cp-watchguard

Graylog Content Pack for Watchguard Fireware Logging

MIT License

34 stars 13 forks source link

Add Extractor for msg_id: 1BFF-0015 #40

Closed ThoZed closed 5 years ago

ThoZed commented 5 years ago

Please provide following information

msg_id: 1BFF-0015
sample of log message: FWDeviceName (2020-01-01T11:11:11) smtp-proxy[2519]: msg_id="1BFF-0015" Deny WAN01 779-DMZ002 tcp 78.78.98.172 10.70.60.50 49480 33333 msg="ProxyDeny: SMTP line length too long" proxy_act="SMTP-Incoming.area03_r1.1" line_length="9999" geo_src="DEU" (Policxyz-00)
Graylog Version: 3.0.2

extractor rule definition(optional)

extractor type: GROK