Getting Data In

Split _raw column

resparis
New Member

Hi., I have the following information in the _raw column.
Jul 4 15:41:10 name.domain.net Jul 04 2013 14:41:10: %ASA-1-106021: Deny UDP reverse path check from 172.16.3.62 to 255.255.255.255 on interface inside

Is there a way to separate the information and then create a table?

Tags (2)
0 Karma

Gilberto_Castil
Splunk Employee
Splunk Employee

The most efficient way to accomplish this is to load the Technology Add-on for Cisco ASA from Splunkbase.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...