Hi!

I have ELA 10.0 and I need to extract some fields (src/dst IP, src/dst port, etc.) from syslog "Message" field.

I found guide for extract new fields for windows log data. But for syslog I can't see "Wrench" icon for create and apply new pattern to extract new fields. On this point I see "Assign Tag" instead "wrench". There is a solution for syslog?