<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[syslog configuration]]></title><description><![CDATA[<p dir="auto">hi,</p>
<p dir="auto">i have enabled the syslog daemon and i am receiving log that i can see in the syslog monitor but now i want to turn them into alarms, how do i do that ?<br />
what are the syslog parameters ? are they like snmp varbinds ?<br />
how do i edit the message to display only parts of it ?</p>
<p dir="auto">10x,<br />
lindeamon</p>
]]></description><link>https://forum.netxms.org/topic/2091/syslog-configuration</link><generator>RSS for Node</generator><lastBuildDate>Fri, 13 Nov 2026 11:18:28 GMT</lastBuildDate><atom:link href="https://forum.netxms.org/topic/2091.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 19 Dec 2012 17:00:35 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to syslog configuration on Thu, 03 Jan 2013 17:27:54 GMT]]></title><description><![CDATA[<p dir="auto">Thank you victor,<br />
when will you issue the next release ?  <img src="https://forum.netxms.org/assets/plugins/nodebb-plugin-emoji/emoji/android/1f642.png?v=72b86a538fc" class="not-responsive emoji emoji-android emoji--slightly_smiling_face" style="height:1.4em;width:auto;vertical-align:middle" title=":)" alt="🙂" /></p>
]]></description><link>https://forum.netxms.org/post/9240</link><guid isPermaLink="true">https://forum.netxms.org/post/9240</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Thu, 03 Jan 2013 17:27:54 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Thu, 03 Jan 2013 14:49:16 GMT]]></title><description><![CDATA[<p dir="auto">Hi!</p>
<p dir="auto">You can just type &amp;lt; and &amp;gt; in XML file in old console (don't forget semicolon!). And if you need &amp; character, you should use &amp;amp;</p>
<p dir="auto">Best regards,<br />
Victor</p>
]]></description><link>https://forum.netxms.org/post/9238</link><guid isPermaLink="true">https://forum.netxms.org/post/9238</guid><dc:creator><![CDATA[victor]]></dc:creator><pubDate>Thu, 03 Jan 2013 14:49:16 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Thu, 03 Jan 2013 13:47:47 GMT]]></title><description><![CDATA[<p dir="auto">hi victor,</p>
<p dir="auto">i have managed to solve the problem. apparently i had to use both new and old consoles.<br />
i have used the new console to create the xml structure which represented "&lt;" and "&gt;" as &amp;lt &amp;gt and the old console to delete everything else.<br />
what i did not know is that i have to leave the class='java......." that the new console created.</p>
<p dir="auto">10x,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/post/9237</link><guid isPermaLink="true">https://forum.netxms.org/post/9237</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Thu, 03 Jan 2013 13:47:47 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Thu, 03 Jan 2013 13:29:30 GMT]]></title><description><![CDATA[<p dir="auto">hi victor,</p>
<p dir="auto">how do i represent &lt; in reg exp ?<br />
i want to match: xxxxxxxxxxxxx xxxxxxxxxx &lt;50000&gt; xxxxxxxxxxxxxxxxxxxxxx<br />
where &lt;50000&gt; is a string.<br />
i have managed to do this with 50000 but i need to do this as &lt;50000&gt;</p>
<p dir="auto">Thanks,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/post/9236</link><guid isPermaLink="true">https://forum.netxms.org/post/9236</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Thu, 03 Jan 2013 13:29:30 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Thu, 20 Dec 2012 07:21:20 GMT]]></title><description><![CDATA[<p dir="auto">hi victor,</p>
<p dir="auto">now i am starting to remember. i asked some questions before regarding event log monitor and this brings up everything.<br />
is there any way to make things more simpler ? meaning that you develop a window/utility/something that will allow me to boost up my productivity ?<br />
as always, can't get enough of your fine work.</p>
<p dir="auto">Best Regards,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/post/9213</link><guid isPermaLink="true">https://forum.netxms.org/post/9213</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Thu, 20 Dec 2012 07:21:20 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Wed, 19 Dec 2012 21:07:57 GMT]]></title><description><![CDATA[<p dir="auto">For example, you have syslog records like this coming in:</p>
<p dir="auto">Error: some error text</p>
<p dir="auto">and you want to have everything after "Error:" to be message text of your event. First, you should create new event with name, for example, SYSLOG_ERROR and with message simply set to %1 (value of first parameter). Then, the following syslog parser will create correct events:</p>
<pre><code>&lt;parser&gt;
    &lt;rules&gt;
        &lt;rule&gt;
            &lt;match&gt;Error: (.*)&lt;/match&gt;
            &lt;event params="1"&gt;SYSLOG_ERROR&lt;/event&gt;
        &lt;/rule&gt;
    &lt;/rules&gt;
&lt;/parser&gt;
</code></pre>
<p dir="auto">what will be catch by first matching group in regexp will come into first parameter of the event, second matching group to second parameter, and so on.</p>
<p dir="auto">Best regards,<br />
Victor</p>
]]></description><link>https://forum.netxms.org/post/9210</link><guid isPermaLink="true">https://forum.netxms.org/post/9210</guid><dc:creator><![CDATA[victor]]></dc:creator><pubDate>Wed, 19 Dec 2012 21:07:57 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Wed, 19 Dec 2012 20:53:22 GMT]]></title><description><![CDATA[<p dir="auto">hi victor,</p>
<p dir="auto">are there any variables to use with syslog ?<br />
i have red the explanation but i could not find how to take the message that came with the syslog event and transfer it to the event message of netxms after parsing and reducing what i do not need out of it.</p>
<p dir="auto">Best Regards,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/post/9207</link><guid isPermaLink="true">https://forum.netxms.org/post/9207</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Wed, 19 Dec 2012 20:53:22 GMT</pubDate></item><item><title><![CDATA[Reply to syslog configuration on Wed, 19 Dec 2012 18:24:23 GMT]]></title><description><![CDATA[<p dir="auto">Hi!</p>
<p dir="auto">You have to create correct log parser. See this section of the manual: <a href="http://wiki.netxms.org/wiki/UM:Log_Monitoring" rel="nofollow ugc">http://wiki.netxms.org/wiki/UM:Log_Monitoring</a> for parser syntax.</p>
<p dir="auto">Best regards,<br />
Victor</p>
]]></description><link>https://forum.netxms.org/post/9204</link><guid isPermaLink="true">https://forum.netxms.org/post/9204</guid><dc:creator><![CDATA[victor]]></dc:creator><pubDate>Wed, 19 Dec 2012 18:24:23 GMT</pubDate></item></channel></rss>