In https://github.com/elastic/beats/pull/13286 we switched Filebeat's Cisco ASA dataset to use a regular udp input instead of a syslog input, however, the cisco.yml still makes it look like we're using syslog:
asa:
enabled: true
# Set which input to use between syslog (default) or file.
var.input: syslog
# The interface to listen to UDP based syslog traffic. Defaults to
# localhost. Set to 0.0.0.0 to bind to all available interfaces.
var.syslog_host: localhost
# The UDP port to listen for syslog traffic. Defaults to 9001.
var.syslog_port: 9001
In https://github.com/elastic/beats/pull/13286 we switched Filebeat's Cisco ASA dataset to use a regular
udp
input instead of asyslog
input, however, thecisco.yml
still makes it look like we're usingsyslog
:.../module/cisco/asa/config/input.yml
This may cause some confusion and it'd be helpful to adjust settings/comments to reflect the use of a
type: udp
input.