All Apps and Add-ons

Netscaler: certain fields are not extracted

BlueTurtleM
New Member

In the "Top Appliances with App Firewall Violations" panel under the Appliance Overview this graph is not working properly. Graph shows the appliance but groups it under null as the field violation is not present.

This field called "violation" which has not been extracted by the Netscaler app is the issue and there is possibly more fields that are not extracted by the look of things.

Is this something we need to extract ourselves ? If so, if possible, please could the regex be provided. I am using the sourcetype citrix_netscaler_syslog.

Thank you,

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.