https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305356#M57618 <P>The the syslog data from our barracuda EMSG is being ingested into Splunk, but I'm having trouble extracting fields from the data. I'm using the regular expression builder, however not all of the data is in the same "format" and I can't define all the fields. Am I missing something here? I've searched the answers, and I can't find anything related to this. </P> Mon, 27 Nov 2017 20:23:24 GMT lawlzsloth 2017-11-27T20:23:24Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305356#M57618 <P>The the syslog data from our barracuda EMSG is being ingested into Splunk, but I'm having trouble extracting fields from the data. I'm using the regular expression builder, however not all of the data is in the same "format" and I can't define all the fields. Am I missing something here? I've searched the answers, and I can't find anything related to this. </P> Mon, 27 Nov 2017 20:23:24 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305356#M57618 lawlzsloth 2017-11-27T20:23:24Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305357#M57619 <P>There are apps for that:<BR /> <A href="https://splunkbase.splunk.com/apps/#/search/Barracuda/">https://splunkbase.splunk.com/apps/#/search/Barracuda/</A></P> Mon, 27 Nov 2017 20:32:35 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305357#M57619 woodcock 2017-11-27T20:32:35Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305358#M57620 <P>There are more than one app in your link. Which one works perfect with Barracuda Email Security Gateway ?<BR /> I have the same trouble too. Hope your help if convenient.</P> Tue, 03 Apr 2018 09:42:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305358#M57620 kimikoyan 2018-04-03T09:42:56Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305359#M57621 <P>Which one works perfect with Barracuda Email Security Gateway ?</P> Fri, 24 Aug 2018 20:54:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305359#M57621 evinasco 2018-08-24T20:54:18Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305360#M57622 <P>This is what i am using so far and you may have to edit the eventypes and add index. <A href="https://splunkbase.splunk.com/app/3123/">https://splunkbase.splunk.com/app/3123/</A><BR /> Any ideas on which one to use for web gateways and mail archiver?</P> Mon, 15 Jul 2019 21:40:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305360#M57622 Bentash 2019-07-15T21:40:28Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305361#M57623 <P>This is what i am using so far and you may have to edit the eventypes and add index. <A href="https://splunkbase.splunk.com/app/3123/">https://splunkbase.splunk.com/app/3123/</A><BR /> Any ideas on which one to use for web gateways and mail archiver?</P> Mon, 15 Jul 2019 21:40:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-parse-all-the-syslog-data-from-our-Barracuda-Email/m-p/305361#M57623 Bentash 2019-07-15T21:40:54Z