logwatch.nsm SubAgent

[DanG]

Hi,

I'm trying to set the logwatch agent to capture event from the windows Application log.

The configuration loads without any error the parser file reads as follows:

<parser trace="7">
  <file>*Application</file>
  <rules>
    <rule>
      <source>Dcs*</source>
      <match>(.*)</match>
      <event params="1">100012</event>
    </rule>
  </rules>
</parser>

however no event is raised. I've started the agent is debug mode, I can see other agent event getting triggered but not the log watch.

Is the above wrong?

BTW. IMHO the nxagentd.conf file path syntax for *LOGWATCH is inconsistent

This does not work
Parser = "C:\Program Files\NetXMS\abc.xml"

This does:
Parser = C:\Program Files\NetXMS\abc.xm

Notice the space in the path... I would have though delimiting the path by quotes should be mandatory or at least allowed.

Kind regards,

Dan

[victor]

Hi!

I don't see any problem in parser configuration. Could you please send me debug output of the agent?

Best regards,
Victor