Windows event parser stopped working
-
Windows event parser suddenly stopped parsing my rules. I even tried to wipe all rules and just create the most simple rule (below), but no NetXMS Events are created. I still see the log entries in Windows Event Log (in NetXMS).
What might have happened, or how can I debug this to find a resolution?
Using NetXMS 4.2.395.
Best regards
<parser name="ParserNEW"> <macros/> <rules> <rule name=""> <match repeatInterval="0" reset="false">.*</match> <event>TEST_EVENT</event> <agentAction action=""></agentAction> </rule> </rules> </parser> -
It's a bug introduced in 4.2. It affects syslog and windows event log processing in fields "source" and "tag".
Bug is fixed, will be in next patch release.
Meanwhile you can put * character in source, it should work that way.
-
@filipp-sudanov said in Windows event parser stopped working:
Meanwhile you can put * character in source, it should work that way.
Yes, it did work. Thank you.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login