Graylog extractor for pfSense

[Ames]

I’m seeing a lot of extractors for pfSense on Graylog. It looks like Tom’s Github is for an older version of pfSense? This seems to be the most current one I’ve found. Does anyone have a better one?

GitHub - jbsky/graylog: Graylog extractor

[LTS_Tom]

I need to update my GitHub, but in the mean time I have my updated ones here:

GrayLog extractor for pfsense 22.01

Hi All, Im having problems getting certain items into fields when searching for messages. My extractor that I am using is either Toms from his videos or some I found in the MarketPlace and when I try to validate the regular expression it fails. For example, taken from the marketplace: ^filterlog:\s+.,(in|out),4,.,tcp,.*$ I get the error Does not match! Extractor would not run. The Log Message Format in pfsense is set to syslog (RFC5424)

[Ames]

Thanks @LTS_Tom We need to merge these. I like the way BSD shows up with-in PF system log viewer better than syslog. So I’d prefer your method. This syslog based extractor covers a bunch of things. It would be nice to have your filters for all of them. I’ll see about converting them. I’m not a regex wizard though.