Our setup is like this:
* Syslog Server parses log for all nodes
* NodeA and NodeB is Managed, alarms are working as intented when Syslog Server parser finds error entries.
* NodeC is Unmanaged because its not operative yet and are making alot of errors in syslog (As expected).
* Syslog Server parses log and push NodeC's error entries into NetXMS.
* NetXMS triggers threshold even if the node is set to unmanaged.
Is this correct or a bug?
I would say it's a bug. There was similar problem with SNMP traps. Now server do not create events from SNMP traps from unmanaged nodes unless you set ProcessTrapsFromUnmanagedNodes parameter to 1. I'll do the same for syslog.
Best regards,
Victor
In our setup, Syslog Server is not the implemented one.
Its something we have built ourself and it uses "nxpush" to push it into NetXMS.
NetXMS do not poll to get this DCI values into db.
Does it still apply to what you explained?
No, it's a bit different - I was thinking that you are talking about built-in syslog server. Anyway, it is possible to add an option to discard data push for unmanaged nodes.
Best regards,
Victor