Hi,
I'm trying to set the logwatch agent to capture event from the windows Application log.
The configuration loads without any error the parser file reads as follows:
<parser trace="7">
<file>*Application</file>
<rules>
<rule>
<source>Dcs*</source>
<match>(.*)</match>
<event params="1">100012</event>
</rule>
</rules>
</parser>
however no event is raised. I've started the agent is debug mode, I can see other agent event getting triggered but not the log watch.
Is the above wrong?
BTW. IMHO the nxagentd.conf file path syntax for *LOGWATCH is inconsistent
This does not work
Parser = "C:\Program Files\NetXMS\abc.xml"
This does:
Parser = C:\Program Files\NetXMS\abc.xm
Notice the space in the path... I would have though delimiting the path by quotes should be mandatory or at least allowed.
Kind regards,
Dan