Ciscoasa log parser update broken

[Anonymous]

Has anyone had their logs from a Cisco ASA device cause issues with their log decoders? We believe that a recent update to the log parser has caused issues with EVENTTIME and caused the log decoder to completeley stop. Disabling the ciscoasa parser fixes the issue.

[AkramHamed]

Hello,

In order to better understand what happened, I would ask you to send us a sample of logs that we can check.

Also please make sure you have the latest CiscoASA parser, from live.

Go to the live tab, search for ciscoasa as below

now, double click on this entry, make sure to deploy the latest if your version isnt the latest, as below.

Let me know if you need further assistance.

Akram Hamed.

[Anonymous]

the parser appears to be working again.

I re-enabled it and the errors didn't return. I also updated the parser and the errors didn't return

thanks.