LOGWATCH: issues when parsing files with ISO-8859-1 encoding

[Jos.Verduijn]

Hi,

Isn't it possible to parse files with ISO-8859-1 encoding using LOGWATCH?

I created a test using the following configuration:

<parser trace="7">
    <file>d:\demo.txt</file>
    <rules>
        <rule>
            <match>[0-9]{3}</match>
            <event>100000</event>
        </rule>
    </rules>
</parser>

When I save a file with 123 as the content the parser will match if it is saved with UTF-8 encoding and it won't match if it is saved with ISO-8859-1 encoding.

Did I forget a setting or is still as intended?

The log that I need to monitor will be in ISO-8859.

I installed the nxagent-1.2.6-x64 agent and it is running on a Windows 2003 R2 x64 server.

Regards,

Jos

[victor]

Hi!

It's very strange, LOGWATCH should work with ISO-8859-1 without any problem. And file with only 123 as a content should be identical in both UTF-8 and ISO-8859-1 encodings. Can you post sample of matching and non-matching files?

Best regards,
Victor

[Jos.Verduijn]

Hi Victor,

These are the two files I used while testing.
The 123 in the ANSI file isn't seen as a match, the 123 in the UTF-8 file matches.

Cheers,

Jos

---

demo_ANSI.txt

demo_UTF-8.txt