elastic / elastic/integrations

[Cisco IOS]: Time and timezone parsing issues

Open
#13,440 3 comments 0 reactions 0 assignees View on GitHub
Integration:cisco_ios needs:triage Stalled Team:Security-Deployment and Devices
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Cisco IOS [cisco_ios]

### Dataset Name

_No response_

### Integration Version

1.30.0

### Agent Version

8.17.4

### Agent Output Type

elasticsearch

### Elasticsearch Version

8.17.4

### OS Version and Architecture

Using the official Agent image

### Software/API Version

_No response_

### Error Message

_No response_

### Event Original

`<186>2679101: 2679098: Apr 7 11:26:31.667 MET-DST: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0c9d.92c5.0833 on port GigabitEthernet1/0/6.`

### What did you do?

_No response_

### What did you see?

Cisco logs are not fully processed since we entered DST, as `MET-DST` does not fit the timezone pattern here: https://github.com/elastic/integrations/blob/ebb60b491cd869aef43523502470758d53665831/packages/cisco_ios/data_stream/log/elasticsearch/ingest_pipeline/default.yml#L54

### What did you expect to see?

Fully parsed message.

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.