diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf index cf3670a902a853253cfeea55efb923e634914f63..19f6da89747caba6c8ef886f6918d508f0212c5d 100644 --- a/conf.d/10-pf.conf +++ b/conf.d/10-pf.conf @@ -6,7 +6,7 @@ filter { match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ] # OPNsense # pfSense - Enable/Disable the line below based on firewall platform - # match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ] + # match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program} %{GREEDYDATA:syslog_message}" ] # pfSense add_field => [ "received_at", "%{@timestamp}" ] add_field => [ "received_from", "%{host}" ]