<![CDATA[log parsing]]>hi,

how do i define several parameters to be passed in the <event>.
what will happen if i will write a variable name after the dot ?
for example:
<match>process:(.var)</match>
<event params="1">200000</event>

will the param name be "var" ?

10x,
lindeamon

]]>https://forum.netxms.org/topic/1297/log-parsingRSS for NodeFri, 13 Nov 2026 12:15:15 GMTSun, 14 Aug 2011 15:31:57 GMT60<![CDATA[Reply to log parsing on Tue, 16 Aug 2011 07:21:12 GMT]]>thank you very much

]]>https://forum.netxms.org/post/5757https://forum.netxms.org/post/5757Tue, 16 Aug 2011 07:21:12 GMT<![CDATA[Reply to log parsing on Tue, 16 Aug 2011 06:16:07 GMT]]>
  • No. You should create separate xml file for each parser.
  • You can pass as many parameters as you like. Attribute params contains number of parameters, so if you have 4 parameters for the event, you will have <event params="4">. Of course you have to have appropriate number of capturing groups in regular expression.

    • Best regards,
    Victor

    ]]>    https://forum.netxms.org/post/5753https://forum.netxms.org/post/5753Tue, 16 Aug 2011 06:16:07 GMT    <![CDATA[Reply to log parsing on Tue, 16 Aug 2011 05:10:48 GMT]]>thank you victor.
    i have another 2 questions that came up my mind reading your answer.

    1. can one xml file contain 2 <parser> sections ?
    2. can the <event> contain two attributes meaning passing the two param ? something like this <event params="1","2"> or <event params="1",params="2">

    10x,
    lindeamon

    ]]>    https://forum.netxms.org/post/5751https://forum.netxms.org/post/5751Tue, 16 Aug 2011 05:10:48 GMT    <![CDATA[Reply to log parsing on Mon, 15 Aug 2011 06:58:44 GMT]]>hi!

    currently named parameters are not supported in the log parser. If you pass multiple parameters, they will be numbered in order they appear in regexp. For example, if you have the following rule:

    <match>Error (.*) at (.*)</match>
    <event params="2">200000</match>

    You will have two parameters - number 1 and number 2, and it will be possible to use them in macro expansion as %1 and %2. For log record

    Error 4 at test

    with this rule you will have
    %1 == "4"
    %2 == "test"

    Best regards,
    Victor

    ]]>    https://forum.netxms.org/post/5731https://forum.netxms.org/post/5731Mon, 15 Aug 2011 06:58:44 GMT