elasticsearch/logstash — pull request #1162 by viq (2014-03-11 16:21:48+00:00)
Title: Add underscore to first part of CISCOTAG

I've encountered a switch sending SW_MATM-4-MACFLAP_NOTIF and this lets it match