https://community.splunk.com/t5/Getting-Data-In/how-can-I-analyze-logs-and-extract-fields-from-network-device/m-p/489038#M83644 <P>Even though I collected some logs from network device, like Cisco switch and firewall. but how can I analyze them and extract fields?<BR /> Splunk only supply a source "Cisco:asa", but it can only identify less fields from network device logs. Shall I extract them manually or there's another plugins to solve this problem? </P> Mon, 20 Jan 2020 08:22:32 GMT lllidan 2020-01-20T08:22:32Z https://community.splunk.com/t5/Getting-Data-In/how-can-I-analyze-logs-and-extract-fields-from-network-device/m-p/489038#M83644 <P>Even though I collected some logs from network device, like Cisco switch and firewall. but how can I analyze them and extract fields?<BR /> Splunk only supply a source "Cisco:asa", but it can only identify less fields from network device logs. Shall I extract them manually or there's another plugins to solve this problem? </P> Mon, 20 Jan 2020 08:22:32 GMT https://community.splunk.com/t5/Getting-Data-In/how-can-I-analyze-logs-and-extract-fields-from-network-device/m-p/489038#M83644 lllidan 2020-01-20T08:22:32Z https://community.splunk.com/t5/Getting-Data-In/how-can-I-analyze-logs-and-extract-fields-from-network-device/m-p/489039#M83645 <P>Hi @lllidan,<BR /> see in apps.splunk.com if there's a Technical Add-on for your device that gives you all the needed extractions: probably this is what you're searching <A href="https://splunkbase.splunk.com/app/1620/">https://splunkbase.splunk.com/app/1620/</A> .<BR /> I'm sure that you'll find what you need, but otherwise, you can use a regex for this extraction.</P> <P>Ciao.<BR /> Giuseppe</P> Mon, 20 Jan 2020 08:27:28 GMT https://community.splunk.com/t5/Getting-Data-In/how-can-I-analyze-logs-and-extract-fields-from-network-device/m-p/489039#M83645 gcusello 2020-01-20T08:27:28Z