Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk Add-on for Cisco ASA 3.2.4: DateParserVerbose - Failed to parse timestamp. Defaulting to timestamp of previous event

$
0
0
On our Heavy Forwarder 6.3.3 with Cisco ASA 3.2.4 we keep receiving `DateParserVerbose - Failed to parse timestamp. Defaulting to timestamp of previous event`. Why does the Cisco ASA TA have a TIME_PREFIX without a complete regex? `[cisco:asa] TIME_PREFIX = ^ MAX_TIMESTAMP_LOOKAHEAD = 30` Sanitized Sample log Mar 17 04:16:58 10.10.10.10 Mar 17 2016 04:16:58: %ASA-6-305011: Built dynamic UDP translation from Inside:10.10.20.20/2595 to Outside:8.8.8.8/2595

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>