Hello!
I'm trying to collect logs from Cisco ASA devices through Heavy Forwarder, I'm sending all Cisco ASA logs to my HF instance and then send them to indexers.
I want to parse these logs and send to indexers only VPN-event logs. How can I filter them?
Can I filter them using event types from Cisco Add-on?