Nagios Support Forum

I not sure I follow you. I clicked on the link posted by @mcapra that took me to a message board titled "All Log Entries on same facility/priority/severity". I read all 5 pages and they never found a solution. If there is one, could you please copy and paste it here?

I didn't see any solutions in that article.

10.100.11.17 syslog <164>%ASA-4-106023: Deny udp src LAN-DMZ:172.20.#.#/64603 dst identity:229.111.#.#/3071 by access-group "LAN-DMZ_access_in" [0xe0362917, 0x0] 0 Emergency _grokparsefailure_sysloginput 2017-09-12T15:03:11.618-05:00 View: Table / JSON / Raw Field Action Value Search @time...

Sure. Whic logs would you like to see?

Yes, I can. I'm not sure what you would like to see though.

I'm not sure why but all syslogs received from my Cisco ASA comes in as a "Severity" 0 and "Severity_Label" Emergency. I checked the firewall and the messages are of different severity's (like 4 or 6) but Nagios LS is not categorizing correctly. This creats problems with filterin...