Hi,
I'm trying to set up a log parser rule that would trigger an event if an administrator logs on to a monitored computer, however this rule causes the NetXMS server to crash with segmentation fault.
NetXMS Server versions that I've tried: 4.5.3, 4.5.4
The parser which causes the crash (made it with the GUI then switched to the XML view):
How could I solve this?
I'm trying to set up a log parser rule that would trigger an event if an administrator logs on to a monitored computer, however this rule causes the NetXMS server to crash with segmentation fault.
NetXMS Server versions that I've tried: 4.5.3, 4.5.4
The parser which causes the crash (made it with the GUI then switched to the XML view):
Code Select
<parser name="Default parser">
<macros/>
<rules>
<rule name="Admin logon">
<match repeatInterval="0" reset="false">Emelt szintű jogkivonat:\s+Igen(?:.|\n)+Fióknév:\s+(\w+)</match>
<event>VV_ADMIN_LOGON</event>
<id>4624</id>
<agentAction action=""></agentAction>
</rule>
</rules>
</parser>
Windows event 4624 is created when a user logs in and with this rule I'd like to check if they're an administrator and what is their name. (The monitored desktops run Windows 10 with Hungarian language.)How could I solve this?