From 913f8ff05dde33a92a6e201c0e65b5c93618bcb4 Mon Sep 17 00:00:00 2001
From: Andrew <a@3ilson.com>
Date: Sun, 6 Oct 2019 20:39:08 -0400
Subject: [PATCH] Update 10-pf.conf

---
 conf.d/10-pf.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf
index cf3670a..19f6da8 100644
--- a/conf.d/10-pf.conf
+++ b/conf.d/10-pf.conf
@@ -6,7 +6,7 @@ filter {
       match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ]
       # OPNsense
       # pfSense - Enable/Disable the line below based on firewall platform
-      # match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ]
+      # match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program} %{GREEDYDATA:syslog_message}" ]
       # pfSense
       add_field => [ "received_at", "%{@timestamp}" ]
       add_field => [ "received_from", "%{host}" ]
-- 
GitLab