I installed the new version of NetXms(1.2.4) and the syslog massages parsing is not working properly.
Version 1.2.2 has working perfectly with this XML parser definition:
<parser name="">
<file></file>
<rules>
<rule>
<match>%SW_MATM-4-MACFLAP_NOTIF: (.*)</match>
<event params="1">100001</event>
<description>Detectie MAC Flap</description>
<context action="set" reset="auto"></context>
</rule>
</rules>
</parser>
Example of syslog messages:
10.11.2012 18:07:56 Cisco 3750 Warning Local7 Cisco 3750 79745 79745: Nov 10 18:07:55: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.17cf.5667 in vlan 1 is flapping between port Gi1/0/25 and port Gi1/0/22
10.11.2012 18:07:41 Cisco 3750 Warning Local7 Cisco 3750 79744 79744: Nov 10 18:07:40: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.17cf.5667 in vlan 1 is flapping between port Gi1/0/25 and port Gi1/0/22
10.11.2012 18:07:34 Cisco 3750 Warning Local7 Cisco 3750 79743 79743: Nov 10 18:07:33: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.17cf.5667 in vlan 1 is flapping between port Gi1/0/25 and port Gi1/0/22