coolacid/logstash-cef — pull request #2 by laf-rge (2014-06-12 18:47:11+00:00)
Title: fixed issue with split for syslog case

I think you expect to have 2 strings, not 1. The current code fails since data is nil in the case of syslog.