[Cisco IOS Integration] Events are cutted / Error

[makkaroni8]

Hi,
I'm encountering an issue where an event is being interrupted / Error. In my old syslog I get this message:
630774: Jul 26 14:22:19.367 MESZ: %PKI-3-CRL_FETCH_FAIL: CRL fetch for trustpoint XXXXXX failed Reason : Failed to select socket. Timeout : 5 (Connection timed out)
But the following comes to ELK
<187>488117: DHVCA2: 300874: Jul 26 14:22:19.367 MESZ: %PKI-3-CRL_FETCH_FAIL: CRL fetch for trustpoint XXXXXX failed

I'm not sure if this is the same problem. but I also get this:
<187>422153: KSCA-MKZ: Reason : Failed to select socket. Timeout : 5 (Connection timed out)
and i get this error
Processor "dissect" with tag "dissect_header" in pipeline "logs-cisco_ios.log-1.16.2" failed with message "Unable to find match for dissect pattern: %{_temp_.header} %%{message} against source: <187>422153: KSCA-MKZ: Reason : Failed to select socket. Timeout : 5 (Connection timed out) "
I'm not sure if this error is my fault, but I have no idea how to fix it.

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[efd6]

@makkaroni8 Can you provide complete documents for the events that you believe are corrupted, with the preserve original event option turned on? It is not clear to me what the issue is here; the first example looks fine and the second example is an invalid message, so the error is expected.

[pkoutsovasilis]

I will kindly make the the same request as the comment above. Having such documents, with the preserve original event option turned on, are gonna be tremendously beneficial to tackle this one 🙂