Windows Event Log parser file not filtering
-
Curious. I have these parser file.
<parser>
<file>*Application</file>
<rules>
<rule>
<Level>1</Level>
<match>(.*)</match>
<event params="1">100804</event>
</rule>
<rule>
<Level>2</Level>
<match>(.*)</match>
<event params="1">100803</event>
</rule>
</rules>
</parser>The idea is if there are a error or warning in Windows application log file to send an email. The only issue is it sends every event, the parser does not filter. Is my format incorrect in the parser file? I've tried using both <level> and <severity>
One issue here is since the filter does not filter "information" logs once I turn this filter and alerts on NetXMS goes into a continuous loop of alerts and emails. Kind of a show stopper.
Thanks
-
Hi!
Parser XML element names are case-sensitive. You should use <level> instead of <Level>.
Best regards,
Victor
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login