[pfSense]: HAproxy logs are not ingested

[krejkrejkrej]

Integration Name

pfSense [pfsense]

Dataset Name

pfsense.log

Integration Version

1.22.0

Agent Version

8.17.5

Agent Output Type

elasticsearch

Elasticsearch Version

8.17.5

OS Version and Architecture

Ubuntu

Software/API Version

No response

Error Message

No response

Event Original

No response

What did you do?

x

What did you see?

HAproxy logs are not parsed correctly and dropped.

Problem is that the grok patterns contain multiple instances of double spaces instead of single spaces between words, and the patters will never match.

Spaces seems to correlate with line breaks in the yaml file with pipeline definitions.

What did you expect to see?

HAproxy logs.

Anything else?

No response

[elasticmachine]

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

[botelastic]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!