Hi,
Glad this had been solved.
I have a related question to syslog events. I can pass params of matching regex defined in the parser <match>...</match> section.
I'd like to pass the event ID as an additional parameter so I can test on it in the Event Processing Policy, Is there a way to do this?
Regards,
Dan
Glad this had been solved.

I have a related question to syslog events. I can pass params of matching regex defined in the parser <match>...</match> section.
I'd like to pass the event ID as an additional parameter so I can test on it in the Event Processing Policy, Is there a way to do this?
Regards,
Dan