From e483a896e28dc552db164f9f918834aee024c98f Mon Sep 17 00:00:00 2001
From: rfaircloth-splunk <rfaircloth@splunk.com>
Date: Tue, 19 May 2020 14:11:52 -0400
Subject: [PATCH] Update cisco_syslog.conf

---
 package/etc/conf.d/filters/cisco/cisco_syslog.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/package/etc/conf.d/filters/cisco/cisco_syslog.conf b/package/etc/conf.d/filters/cisco/cisco_syslog.conf
index e750fc7..f4194b1 100644
--- a/package/etc/conf.d/filters/cisco/cisco_syslog.conf
+++ b/package/etc/conf.d/filters/cisco/cisco_syslog.conf
@@ -36,6 +36,11 @@ parser cisco-parser-ex{
                     "${6}",
                     value("MESSAGE")                
                 );
+                set(
+                    "${HOST_FROM}"
+                    value("HOST")
+                    condition(not host("."))
+                );
             };
         } else {
             # All other cisco syslog