Here's the logwatch xml:

<parser>
    <processAll>0</processAll>
    <file>/etc/nxagentd.logwatch.zpool</file>
    <rules>
        <rule>
            <match>DEGRADED</match>
            <event>10014</event>
        </rule>
        <rule>
            <match>ONLINE</match>
            <event>10015</event>
        </rule>
    </rules>
</parser>

Here's the event that is created in the agent log:

[23-Aug-2015 18:53:20.845] [DEBUG] SendTrap(): event_code=10014, event_name=(null), num_args=0, arg[0]="(null)" arg[1]="(null)" arg[2]="(null)"

Here are two more of the other event:

[23-Aug-2015 18:55:05.848] [DEBUG] SendTrap(): event_code=10015, event_name=(null), num_args=0, arg[0]="(null)" arg[1]="(null)" arg[2]="(null)"
[23-Aug-2015 18:55:05.848] [DEBUG] SendTrap(): event_code=10015, event_name=(null), num_args=0, arg[0]="(null)" arg[1]="(null)" arg[2]="(null)"

Nothing shows up on the NetXMS server under the node I'm monitoring or in the Event Log.

Any help much appreciated...
pace

[EDITED to clarify NetXMS Server and Node difference]