Log Scrapping / Log Watch - Multiple Alerts

Started by TICK_TEL, May 20, 2019, 12:39:25 PM

Previous topic - Next topic

TICK_TEL

We are using the log watch feature to monitor the logs of our Interfaces in different file paths etc.

Do within the nxagentd.conf file we are doing;
[LOGWATCH]
Parser = C:\NetXMS\etc\interface1.xml
Parser = C:\NetXMS\etc\interface2.xml


Then within Interface1.xml we are doing;
<parser>
  <file>C:\inetpub\Interface1\logs\Log_%Y_%m_%d.txt</file>
  <rules>
    <rule>
      <match>Error(.*)</match>
      <event>100050</event>
    </rule>
  </rules>
</parser>


The trouble we are having is both Interface 1, 2 etc use the same event to fire on in NetXMS. Ideally we'd like to stick to the one event but be able to identify which interface/log directory has fired it.

Is it possible to add something to the XMLS for us to be able to tell which Interface has fired the error? I.e. Interface 1 or Interface 2 using the same event? Or do we need to setup separate events for each one?


Victor Kirhenshtein

Hi,

currently it's not possible. I've added feature request for ability to pass extra parameters to generated event: https://track.radensolutions.com/issue/NX-1643

Best regards,
Victor

TICK_TEL

Thanks Victor. That would be really handy.

Any ideas of an ETA.