Stay organized with collections
Save and categorize content based on your preferences.
Change log for ARISTA_SWITCH
Date
Changes
2024-06-07
Enhancement:
- Added a Grok pattern to parse the new pattern of SYSLOG format logs.
- Mapped "principal_mac" to "principal.mac".
- Mapped "principal_port" to "principal.port".
2024-03-17
Enhancement:
- Added a Grok pattern to parse SYSLOG format logs.
- Mapped "user" to "principal.user.userid".
- Mapped "proto" to "network.application_protocol".
- Mapped "prin_ip" to "principal.ip".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eA Grok pattern was added on 2024-06-07 to parse a new SYSLOG format, with "principal_mac" and "principal_port" being mapped to "principal.mac" and "principal.port" respectively.\u003c/p\u003e\n"],["\u003cp\u003eOn 2024-03-17, a Grok pattern was introduced for SYSLOG logs, mapping "user", "proto", and "prin_ip" to "principal.user.userid", "network.application_protocol", and "principal.ip".\u003c/p\u003e\n"],["\u003cp\u003eThe parser for ARISTA_SWITCH was newly created on 2022-08-03.\u003c/p\u003e\n"]]],[],null,["# Change log for ARISTA_SWITCH\n============================"]]