Cisco Bug: CSCum23641 - [FEATURE REQUEST] normalize and distill syslog export feeds for SIEMs
Feb 27, 2020
- Cisco Identity Services Engine
Known Affected Releases
Symptom: Log export data has inconsistent field separators, naming conventions. For instance, some username is shown twice, sometimes with domain included, and sometimes with trailing forward slashes: "... UserName=employee1\, ... User-Namefirstname.lastname@example.org\, ..." Also - MAC address fields, such as CallingStationID, appear in multiple notations: "... Calling-Station-ID=20-AA-4B-F9-29-93, ..." "... Calling_Station_ID=00-50-56-82-26-73\, ..." "... Calling_Station_ID=20aa4bf92993, ..." Conditions: Exporting logs via syslog from MNT node.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases