Hi,
I have not received any response from Cisco directly on this topic so I thought I would try here.
I am cleaning up a messy syslog pipeline containing all sorts of devices, including Cisco.
I want to throw everything Cisco in 1 index. But I am not sure Cisco syslog formats are same across all iOS devices: switches, routers, etc. I would assume it would be or very compatible, syslog/CEF...
Can anyone confirm or speak to this question?
Ideally I will move to using SC4S but in the meantime I want to cleanup the existing and use available TAs to parse/format the data.
Any advice appreciated.
Thank you
