Logwatch - pass parameters from windows event logs

Started by joel4321, January 25, 2011, 04:40:55 PM

Previous topic - Next topic

joel4321

Dear all,

Does anyone know if it's possible to pass metadata from windows event logs to netxms events.
In particular, it would be nice to pass some specific metadata like event id, event source to events of netxms, so we are able to identify the events even better in our email system (see attached file as an example of metadata).
Furthermore, an other problem we have is, that logwatch events which use the same event parameter are unique to netxms and count the logs no matter if it's the same windows event or not.

--> I know, we could have a parser definition for each different event, but it's hard to manage and we won't know specific windows event id in the future...

I hope, I made my point clear and it's not confusing  :-[

thank you

Best, Joël