pfitchie / graylog3.fortigate6xcontentpack Goto Github PK

I am having an issue as the devname is not being captured by extractor because it has dashes in it. Can someone help with the regex update to match hostnames with dashes?

Receiving msg:

Can I ask for the README entry to be extended with FortiGate configuration information? What parameters set on FortiGate work with this package?

Getting error installing:
Installing content pack failed with status: Error: cannot POST https://graylog.ingress.com/api/system/content_packs/e2af204d-a932-423e-9381-def42b84d825/2/installations (500). Could not install content pack with ID: e2af204d-a932-423e-9381-def42b84d825

Hi, I've install Fortigate input, Streams output is ok, but dashboard is empty.

Help for fix uit?

If the user property in the message contains a username with a dash (-) it will not extract it.
The extractor is named FGTuser and has the following regex:
^.+\suser="(\w+)?"
I simply changed it to:
^.+\suser="(.+?)"