From 9c80b607bc79c88604c124f04d083ea04782b4a7 Mon Sep 17 00:00:00 2001 From: Hailey Clark Date: Mon, 22 Nov 2021 04:09:16 -0800 Subject: [PATCH] Staged! It works too! --- parsers/s01-parse/freeswitch.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/parsers/s01-parse/freeswitch.yaml b/parsers/s01-parse/freeswitch.yaml index c67b982..e3ebe9f 100644 --- a/parsers/s01-parse/freeswitch.yaml +++ b/parsers/s01-parse/freeswitch.yaml @@ -8,7 +8,7 @@ pattern_syntax: FS_EXTENSION: '\[[0-9a-zA-Z]+@[0-9a-zA-Z.]+\]' nodes: - grok: - pattern: ^%{FS_TIMESTAMP} \[WARNING\] sofia_reg.c:1739 SIP auth failure \(REGISTER\) on sofia profile \'internal\' for %{FS_EXTENSION:fs_exten} from ip %{IP:source_ip}$ + pattern: ^%{FS_TIMESTAMP:timestamp} \[WARNING\] sofia_reg.c:1739 SIP auth failure \(REGISTER\) on sofia profile \'internal\' for %{FS_EXTENSION:fs_exten} from ip %{IP:source_ip}$ apply_on: Line.Raw statics: - meta: log_type