Cisco Grok Patterns

[ngriffin@bankozarks.com]

Working on a new syslog solution and have the need to parse cisco syslogs from routers, catalyst switches, nexus switches, etc. Has anyone spent some time developing grok patterns specific to this? I've found some good references for ASA but not much for traditional IOS and NXOS devices. Thanks

[mostafa.hamouda8]

Hello,

You can use the following rules and patterns from Github:

https://gist.github.com/justinjahn/85305bc7b7df9a6412baedce5f1a0ece

it has an amazing dictionary and good rules to match IOS/NX-OS messages. you will need to develop some rules if you are running some other platforms like ISE/ACS/Prime,...

[munroe]

I was so excited to find this post, and then just as quickly my hopes were dashed as it seems like the linked repo is gone.  Anyone else know of any maintained grok patterns for ios-xe, nx-os, ios-xr?