All ASA syslogs are received with Severity 0

[mcapra]

Perhaps your browser prevents the use of anchors? The URL I shared includes an anchor for the specific post.

Here's an annotated version as the OP is quite long:

I actually think the SEQNUM is what is throwing the message off as it is not part RFC 3164, it is the 240 in the line above

You can do one of 2 things, modify the routers to turn off sequence-numbers

Code: Select all

configure terminal
no service sequence-numbers
copy running-config startup-config

Or, create a different input for the cisco items on a different port and pass the results through a filter like so:

[cdienger]

Thanks for the assist, mcapra!

malcolmleek, let us know if this helped.