elastic / elastic/integrations
[Cisco IOS]: Time and timezone parsing issues
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
### Integration Name
Cisco IOS [cisco_ios]
### Dataset Name
_No response_
### Integration Version
1.30.0
### Agent Version
8.17.4
### Agent Output Type
elasticsearch
### Elasticsearch Version
8.17.4
### OS Version and Architecture
Using the official Agent image
### Software/API Version
_No response_
### Error Message
_No response_
### Event Original
`<186>2679101: 2679098: Apr 7 11:26:31.667 MET-DST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0c9d.92c5.0833 on port GigabitEthernet1/0/6.`
### What did you do?
_No response_
### What did you see?
Cisco logs are not fully processed since we entered DST, as `MET-DST` does not fit the timezone pattern here: https://github.com/elastic/integrations/blob/ebb60b491cd869aef43523502470758d53665831/packages/cisco_ios/data_stream/log/elasticsearch/ingest_pipeline/default.yml#L54
### What did you expect to see?
Fully parsed message.
### Anything else?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.