logstash-plugins / logstash-patterns-core

Apache License 2.0
2.17k stars 979 forks source link

allow underscore in CISCOTAG #255

Closed XnS closed 4 years ago

XnS commented 4 years ago

Cisco Catalyst 9800 produces CISCOTAGS with underscores, for example:

SEC_LOGIN-5-LOGIN_SUCCESS
WEBSERVER-5-LOGIN_PASSED
CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN

This little adjustment matches also for this kind of CISCOTAGS

cla-checker-service[bot] commented 4 years ago

❌ Author of the following commits did not sign a Contributor Agreement: 1f2614385a68900c1e811380aa23b46a5322dcbc

Please, read and sign the above mentioned agreement if you want to contribute to this project

XnS commented 4 years ago

CA has been signed minutes before opening the PR

kares commented 4 years ago

Hey @XnS not sure I follow - in your examples first character isn't a _ and otherwise pattern allows for underscore.