Hello, this is my forwarder inputs.conf looks like but I am unable to see any data in the second index cisco_asa.
index fortinet works just fine.
[default]
host = ABC
[monitor://D:\Syslog\Fortinet]
index = fortinet
sourcetype = fortigate
[monitor://D:\Syslog\ASA]
index = cisco_asa
sourcetype = cisco:asa
Please advise!
↧