diff --git a/package/etc/conf.d/filters/cisco/cisco_syslog.conf b/package/etc/conf.d/filters/cisco/cisco_syslog.conf index 366d228..8fe0309 100644 --- a/package/etc/conf.d/filters/cisco/cisco_syslog.conf +++ b/package/etc/conf.d/filters/cisco/cisco_syslog.conf @@ -102,14 +102,13 @@ parser cisco-parser-ex{ filter { match('^(\*|\.)$' value("7")); }; - rewrite { set("cisco reported time error : ${7}" value("fields.cisco_time_error")); + rewrite { set("cisco reported time error : ${7}" value("fields.cisco_time_error"));}; }; if { - if { - filter { - match('^\w\w\w' value("8")); - }; - parser { date-parser-nofilter(format( + filter { + match('^\w\w\w' value("8")); + }; + parser { date-parser-nofilter(format( '%b %d %H:%M:%S.%f', '%b %d %H:%M:%S', '%b %d %I:%M:%S %p.%f', @@ -118,8 +117,7 @@ parser cisco-parser-ex{ '%b %d %H:%M:%S.%f', '%b %d %Y %H:%M:%S') template("$8")); - }; - }; + }; }; } else { #Cisco AireOS format