32curveball

[root@monitor01 conf.d]# /opt/logstash/bin/logstash -f 11-logstash.conf
Error: Expected one of #, => at line 105, column 19 (byte 3393) after filter {
  if [type] == "syslog" {
    # Split the syslog part and Cisco tag out of the message
    grok {
      match => ["message", "%{CISCO_TAGGED_SYSLOG} %{GREEDYDATA:cisco_message}"]
    }
    # Parse the syslog severity and facility
    syslog_pri { }

32curveball

input {
  file {
    path => ["/var/log/network.log"]
    sincedb_path => "/var/log/logstash"
    start_position => "beginning"
    type => "syslog"
    tags => [ "asa_log" ]
  }
}  #end of input block