Skip to content


Key facts

  • MSG Format based filter
  • Legacy BSD Format default port 514
Ref Link
Splunk Add-on None
Product Manual unknown


sourcetype notes
arista:eos:* None

Sourcetype and Index Configuration

key sourcetype index notes
arista_eos arista:eos netops none
arista_eos_$PROCESSNAME arista:eosq netops The “process” field is used from the event