NetXMS Support Forum

I am using NetXMS Managemente Console 1.2.2 on Windows 7 to (try to) configure a remote NetXMS server.

The NetXMS server is 1.2.2 as well and it is hosted on a Windows 2003 Server R2 Enterprise Edition.

I am trying to configure the syslog parser, but I experience the following issues:
- I am not able to remove a rule added via the Editor
- I am not able to save any change applied to the parser, in both cases of Editor or XML editing

How can I modify the Syslog Parser configuration?

Thank you in advance

Francesco

I enabled parser tracing; I manually edited the file; The result follows.

Begin of the file ------
This line in manually added with an ERROR
This is another line with an ERROR
ERROR line

End of file-------

Standard output begin------
....
<Here first line was added>
[10-Apr-2012 19:17:11] LogParser: new data avialable in file "c:\Windows\Tasks\SchedLgU.txt"
...
<Here second line was added
[10-Apr-2012 19:17:31] LogParser: new data avialable in file "c:\Windows\Tasks\SchedLgU.txt"
[10-Apr-2012 19:17:31] Match line: "
[10-Apr-2012 19:17:31] checking rule 1 ""
[10-Apr-2012 19:17:31]   rule has no context
[10-Apr-2012 19:17:31]   matching against regexp ERROR
[10-Apr-2012 19:17:31]   no match
[10-Apr-2012 19:17:31] Processing stopped at end of rules list; result = false
....
<Here third line was added. Notice that \n is present at the end of the line>
[10-Apr-2012 19:17:46] LogParser: new data avialable in file "c:\Windows\Tasks\chedLgU.txt"
[10-Apr-2012 19:17:46] Match line: "
[10-Apr-2012 19:17:46] checking rule 1 ""
[10-Apr-2012 19:17:46]   rule has no context
[10-Apr-2012 19:17:46]   matching against regexp ERROR
[10-Apr-2012 19:17:46]   no match
[10-Apr-2012 19:17:46] Processing stopped at end of rules list; result = false
[10-Apr-2012 19:17:46] Match line: ""
[10-Apr-2012 19:17:46] checking rule 1 ""
[10-Apr-2012 19:17:46]   rule has no context
[10-Apr-2012 19:17:46]   matching against regexp ERROR
[10-Apr-2012 19:17:46]   no match
[10-Apr-2012 19:17:46] Processing stopped at end of rules list; result = false
....
Standard output end ----

Agent versione: 1.1.10
Operating system: Windows Small Business Server SP2

I installed the 1.1.10 agent but unfortunately nothing changed.
Any other solution?

Thanks

Francesco

I'm trying to watch the System Eventlog in Windows for error events.

I manually add a new error event, while the agent is running in debug mode (level 9).

This is what I can see

[09-Apr-2012 12:46:30] LogWatch: unable to load event source "System" for log "System"

Agent versione is: 1.0.13
Operating system is: Windows 2003 Enterpirse R2

Does anyone have any clue?

I'm trying to watch the log of Windows Scheduled Task.

The file to watch is c:\Windows\Tasks\SchedLgU.txt

The (very basic) parser file I use is
Begin file ----------
<parser>
   <file>c:\Windows\Tasks\SchedLgU.txt</file>
   <rules>
      <rule>
         <match>ERROR</match>
         <event>100002</event>
      </rule>
   </rules>
</parser>
End File -----------

Agent version is: 1.0.13
Operating system is: Windows 2003 server R2

I started the agenti in debug mode (level 9) and I cannot see anything happening.