ehlo550

[FIX] copy all context files from configmap mountpoint

7

This is for issues: #1639 #1576 fixes: - not all context files copied from configmap mountpoint

Netapp Ontapp wrong regex

2

https://github.com/splunk/splunk-connect-for-syslog/blob/main/package/etc/conf.d/conflib/syslog/app-syslog-netapp_ontap.conf ` patterns('^[A-Za-z0-9\-\_\.]+: [0-9]+\.[0-9a-f]+ [0-9a-f]+ [A-Z][a-z][a-z] (?[A-Z][a-z][a-z] \d\d \d\d\d\d \d\d:\d\d:\d\d [+-]?\d{1,2}:\d\d)') ` --> `^[A-Za-z0-9\-\_\.]+: [0-9a-f]+\.[0-9a-f]+ [0-9a-f]+ [A-Z][a-z][a-z] (?[A-Z][a-z][a-z] \d\d \d\d\d\d \d\d:\d\d:\d\d [+-]?\d{1,2}:\d\d)` I send a capture to @mateuszpierzchala-splunk in slack...

The Helm Chart contains a setting for affinity:{} but it is never used [Link](https://github.com/splunk/splunk-connect-for-syslog/blob/6a0fb59777a4bae63108b072dba08c4103a61955/charts/splunk-connect-for-syslog/values.yaml#L111) The StatefulSet template contains fixed settings for affinity [Link](https://github.com/splunk/splunk-connect-for-syslog/blob/6a0fb59777a4bae63108b072dba08c4103a61955/charts/splunk-connect-for-syslog/templates/statefulset.yaml#L231) These static settings include a matchExpression key...

How to prevent : "Value names cannot be longer than 255 characters, this value will always expand to the empty string;"

4

**Was the issue replicated by support?** yes. **What is the sc4s version ?** 2.48 **Is there a pcap available?** yes. **Is the issue related to the environment of the customer...

nginx is not the only webserver

1

hi, i am sure that for example openresty could also be in the server header. regards

cisco_ios does not support Timezone extraction

2

**What is the sc4s version ?** 3.28.1 **Is the issue related to the environment of the customer or Software related issue?** Software **Describe the bug** Cisco switches (cisco_ios) are able...

Palo Alto High Precision Timestamp support

2

**What the vendor name?** Palo Alto **What's the product name?** Firewall **Do you have syslog documentation or a manual for that device??** - [10.2](https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields) - [11.1 & Later](https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields) **Feature Request...

Bug in barracuda_waf parser

13

**What is the sc4s version ?** 3.37.0 **Describe the bug** As mentioned in the slack community. When trying to onboard syslogs from [Cisco CIMC ](https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/monitoring/guide/b_Monitoring_Cisco_IMC_Using_Syslog/b_Monitoring_Cisco_IMC_Using_Syslog_chapter_010.html#id_83377) the logs are identified as...

Add support for Dell Powerstore Alert Logs

1

**What is the sc4s version ?** 3.37.0 **Describe the bug** In [the dell powerstore parser](https://github.com/splunk/splunk-connect-for-syslog/blob/main/package/etc/conf.d/conflib/syslog/app-syslog-dell_powerstore.conf) sc4s is only looking for ```PowerStore_audit_event```. My customer is sending and needing support for ```PowerStore_remote_logging_alert@1139```...