%NAT-6-LOG_TRANSLATION GROK PATTERN

Posted: 05/23/2022 in Uncategorized

Source:

%NAT-6-LOG_TRANSLATION: Deleted Translation TCP 10.0.10.5:80 100.100.100.100:80 65.58.71.51:54360 65.58.71.51:54360 0

Grok pattern:

%{WORD:NAT_State} %{WORD:NAT_Type} %{WORD:NAT_Protocol} %{IPV4:NAT_Inside_local_IP}:%{BASE10NUM:NAT_Inside_local_Port} %{IPV4:NAT_Inside_global_IP}:%{BASE10NUM:NAT_Inside_global_Port} %{IPV4:NAT_Outside_local_IP}:%{BASE10NUM:NAT_Outside_local_Port} %{IPV4:NAT_Outside_global_IP}:%{BASE10NUM:NAT_Outside_global_Port}

Effect:

Leave a comment