Log analytics not ingesting Cisco syslogs

Products

• DX OI SaaS

Issue/Introduction

We recently repaired our log anaytics - updated brcm and syslog-ng.

We are successfully ingesting (into DXO) Linux logs from the brcm server but not Cisco logs even though we see them in the log stream on the syslog-ng server

Resolution

Cisco Logs are appearing as expected after deeper customer investigation. They will add additional filtering to remove kernel messages from syslog-ng.