Proposed structure for log processing policy

struct NX_LPP
{
        TCHAR szName[MAX_OBJECT_NAME];
        DWORD dwVersion;
        DWORD dwFlags;
        TCHAR szLogName[MAX_DB_STRING];
        DWORD dwNumRules;
        NX_LPP_RULE *pRuleList;
};

szName - name of the policy;
dwVersion - version of the policy;
dwFlags - flags:
        NX_LPPF_WINDOWS_EVENT_LOG == 0x01 - Source log file is a Windows
event log
        NX_LPPF_REPORT_UNMATCHED = 0x02 - Agent should report all
unmatched records to server
szLogName - name of the log file. Probably substitution of environment
variables should be allowed.
dwNumRules - number of rules in the policy

struct NX_LPP_RULE
{
        DWORD dwMsgIdFrom;
        DWORD dwMsgIdTo;
        DWORD dwSeverity;
        TCHAR szSource[MAX_DB_STRING];
        TCHAR szRegExp[MAX_DB_STRING];
        DWORD dwEvent;
};

dwMsgIdFrom - Start value of message id range to match to (inclusive)
dwMsgIdTo - End value of message id range to match to (inclusive)
dwSeverity - Severity flags to match
szSource - name of event source to match, or empty string to match any
source
szRegExp - regular expression to match against record text
dwEvent - code of NetXMS event to be generated if record match

Best regards,
Victor
Received on Sat Sep 24 2005 - 00:44:36 EEST