Add a Grok expression for the base part of the Cisco ASA syslog message