Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Flatly)
  • No Skin
Collapse
Brand Logo

NetXMS Forum

  1. Home
  2. Support
  3. Syslog Parser - Repeat Count not working?

Syslog Parser - Repeat Count not working?

Scheduled Pinned Locked Moved Support
1 Posts 1 Posters 12.2k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    M
    Millenium7
    wrote on last edited by
    #1

    Related to this https://www.netxms.org/forum/general-support/syslog-parser-how-to-parse-the-actual-syslog-message-in-the-alert/
    whereby I want to log incorrect login attempts. But only want to generate the alert when there are i.e. 3 invalid login attempts within 30 seconds
    So I set the 'Repeat Count' to 3 and 'Repeat interval' to 30 seconds but it doesn't seem to do anything at all. Every single invalid login attempt generates an alert

    Edit: This is a bug
    I noticed when I set the timer value in the 'Editor' view it would show, but when I change to 'XML' view the repeatcount is 0
    Even if I change it in the XML view, if I exit and come back it goes back to 0 again. That is unless I set the value at least 60 or higher. It seems it doesn't like having any form of seconds as the repeat interval, it must be a minute or more
    Edit2: Additionally this seems to apply to all SysLog messages, not to the specific device/IP it was received from

    so if I try to login to DeviceA 2x, then DeviceB 2x and repeat this cycle every 60 seconds. I will get a Slack message saying I failed to login to DeviceB on the first attempt (I shouldn't get an alert at all)

    1 Reply Last reply
    0

    Hello! It looks like you're interested in this conversation, but you don't have an account yet.

    Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

    With your input, this post could be even better 💗

    Register Login
    Reply
    • Reply as topic
    Log in to reply
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes


    • Login

    • Don't have an account? Register

    • Login or register to search.
    Powered by NodeBB Contributors
    • First post
      Last post
    0
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups