Print Page - Windows event parser stopped working

Title: Windows event parser stopped working
Post by: mashedpotatorocket on October 31, 2022, 06:18:22 PM

Windows event parser suddenly stopped parsing my rules. I even tried to wipe all rules and just create the most simple rule (below), but no NetXMS Events are created. I still see the log entries in Windows Event Log (in NetXMS).

What might have happened, or how can I debug this to find a resolution?

Using NetXMS 4.2.395.

Best regards

Code Select

<parser name="ParserNEW">
  <macros/>
  <rules>
      <rule name="">
        <match repeatInterval="0" reset="false">.*</match>
        <event>TEST_EVENT</event>
        <agentAction action=""></agentAction>
      </rule>
  </rules>
</parser>

Title: Re: Windows event parser stopped working
Post by: Filipp Sudanov on November 01, 2022, 05:42:37 PM

It's a bug introduced in 4.2. It affects syslog and windows event log processing in fields "source" and "tag".

Bug is fixed, will be in next patch release.

Meanwhile you can put * character in source, it should work that way.

Title: Re: Windows event parser stopped working
Post by: mashedpotatorocket on November 03, 2022, 02:53:13 PM

Quote from: Filipp Sudanov on November 01, 2022, 05:42:37 PMMeanwhile you can put * character in source, it should work that way.

Yes, it did work. Thank you.

NetXMS Support Forum

English Support => General Support => Topic started by: mashedpotatorocket on October 31, 2022, 06:18:22 PM