NetXMS Support Forum

Hi,

I'm trying to set the logwatch agent to capture event from the windows Application log.

The configuration loads without any error the parser file reads as follows:

<parser trace="7">
  <file>*Application</file>
  <rules>
    <rule>
      <source>Dcs*</source>
      <match>(.*)</match>
      <event params="1">100012</event>
    </rule>
  </rules>
</parser>

however no event is raised. I've started the agent is debug mode, I can see other agent event getting triggered but not the log watch.

Is the above wrong?

BTW. IMHO the nxagentd.conf file path syntax for *LOGWATCH is inconsistent

This does not work
Parser = "C:\Program Files\NetXMS\abc.xml"

This does:
Parser = C:\Program Files\NetXMS\abc.xm

Notice the space in the path... I would have though delimiting the path by quotes should be mandatory or at least allowed.

Kind regards,

Dan

Hi!

I don't see any problem in parser configuration. Could you please send me debug output of the agent?

Best regards,
Victor