diff --git a/package/etc/conf.d/filters/cisco/cisco_syslog.conf b/package/etc/conf.d/filters/cisco/cisco_syslog.conf index a4f0381..aae8f84 100644 --- a/package/etc/conf.d/filters/cisco/cisco_syslog.conf +++ b/package/etc/conf.d/filters/cisco/cisco_syslog.conf @@ -67,6 +67,11 @@ parser cisco-parser-ex{ "${12}", value("MESSAGE") ); + set( + "${HOST_FROM}" + value("HOST") + condition(not host(".")) + ); }; parser { date-parser-nofilter(format( '%b %d %H:%M:%S.%f',