NetXMS Support Forum

English Support => General Support => Topic started by: DW2 on May 07, 2026, 12:13:31 PM

Title: Logparser Windows Event logs
Post by: DW2 on May 07, 2026, 12:13:31 PM
Hi,

i have problems when using the log parser.
I try to catch Error 251 from the windows Application Log and forward to NetXMS.

When i just change the EventID to 404 or 406 it is working and i see an entry in the Monitor from Server.
I cant figure out why it is not working with "Error" "EventID 251".
I never see a entry in the Debuglog from client with EventID 251.
I tried with Filter of Source "LSA_MONITOR" or without, doesnt change anything.
Logwatch is enabled in Client Agent.

Thank you!

Sorry i forgot: client and Server are 6.1.1
Title: Re: Logparser Windows Event logs
Post by: Filipp Sudanov on May 13, 2026, 02:26:34 PM
Hi,

What are these events from, some RAID software?
Pls double-click on the event in Windows Event viewer and show XML View from Details tab.
Title: Re: Logparser Windows Event logs
Post by: DW2 on May 13, 2026, 05:32:40 PM
Hi,

yes it is from the LSA Software from Broadcom which is writing to eventlog.
Here is the XML from EventID 251 and 404/406.

Thank you!
Title: Re: Logparser Windows Event logs
Post by: Filipp Sudanov on May 14, 2026, 11:22:17 PM
In the original log parser policy editor screenshot you have Level set to 1, but in XMLs you have values 2 and 3.