This extractor is built for pfSense 24.03
and Graylog 6.0.4
Note: You need to use this with the syslog RFC 5424 with RFC 3339
set on your pfSense
System
>Inputs
Manage extractors
Import extractors
extrators.json
contents into the fieldAdd extractors to input