Parsing Issue - ciscorouter

[ShaniAmytai]

Hello,

I am having some parsing issues and need help.

Our system receiving the following logs: 

seems like a standard logs according to my understanding.

Using the most updated live parser 'ciscorouter'.

After parsing, those are the meta keys we are seeing:

  

Any ideas why do we getting all those "word" meta-keys and why both IP addressees under the same key (ip.addr)?

Thanks!

[DaveGlover]

Shani

You are receiving this message because the message is not parsing properly and the parser does not understand the messages.

Could you please provide a few log samples and we could get those messages added to the parser?

Thanks

Dave