pfSense

The documentation of the filterlog format indicates that the format of syslog messages will be:

<Timestamp> <Hostname> filterlog: <CSV data>

Actual messages received look like this:

<134>Nov  9 21:55:09 filterlog: 218,,,1433092534,pppoe2,match,block,in,4,0x0,,57,34698,0,none,6,tcp,40,141.1.1.1,8.8.8.8,25911,23,0,S,1380209254,,39383,,

Ideally from a log collection perspective, the message format should be updated to follow the documentation and include the hostname. Alternatively, the documentation could be updated to accurately reflect the format of messages as they are at present.