NetXMS Support Forum

English Support => General Support => Topic started by: TICK_TEL on May 20, 2019, 12:39:25 PM

Title: Log Scrapping / Log Watch - Multiple Alerts
Post by: TICK_TEL on May 20, 2019, 12:39:25 PM
We are using the log watch feature to monitor the logs of our Interfaces in different file paths etc.

Do within the nxagentd.conf file we are doing;
[LOGWATCH]
Parser = C:\NetXMS\etc\interface1.xml
Parser = C:\NetXMS\etc\interface2.xml


Then within Interface1.xml we are doing;
<parser>
  <file>C:\inetpub\Interface1\logs\Log_%Y_%m_%d.txt</file>
  <rules>
    <rule>
      <match>Error(.*)</match>
      <event>100050</event>
    </rule>
  </rules>
</parser>


The trouble we are having is both Interface 1, 2 etc use the same event to fire on in NetXMS. Ideally we'd like to stick to the one event but be able to identify which interface/log directory has fired it.

Is it possible to add something to the XMLS for us to be able to tell which Interface has fired the error? I.e. Interface 1 or Interface 2 using the same event? Or do we need to setup separate events for each one?

Title: Re: Log Scrapping / Log Watch - Multiple Alerts
Post by: Victor Kirhenshtein on May 21, 2019, 08:56:09 AM
Hi,

currently it's not possible. I've added feature request for ability to pass extra parameters to generated event: https://track.radensolutions.com/issue/NX-1643 (https://track.radensolutions.com/issue/NX-1643)

Best regards,
Victor
Title: Re: Log Scrapping / Log Watch - Multiple Alerts
Post by: TICK_TEL on May 21, 2019, 11:21:09 AM
Thanks Victor. That would be really handy.

Any ideas of an ETA.