I'm getting a syslog from Cisco ACS and it reads like this on Kiwi:
Dec 1 18:44:56 10.16.162.129- sv-chof-acs01.na.bluecap123.net CisACS_01_PassedAuth 1as18p83x 1 0 User-Name=pete,Access Device=SW-CHCL-EXC2
I would like to edit this message to omit some of the garbage I don't care about and display something like this:
PassedAuth - User-Name=pete,Access Device=SW-CHCL-EXC2
Does anyone know of a way to modify incoming syslog messages?
Any help would be appreciated.
Pete