<![CDATA[CISCO Logging and Log Parser]]>Hi, I create a Syslog Parser to detect storm in the network.
When I create my test, I get the event:
TimeStamp date ... source ... severity Critical ... Facility Local7 ... Host name ... tag ... @SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port GigabitEthernet0/14 ....

In the Log Parser I created the rule:
Matching regular expression : *BLOCK_BPDUGUARD*
Severity : Critical
And I generate an alert.

Is is possible to forward all the content of the syslog message to the alert or email ?

Thanks in advance for your help !

]]>https://forum.netxms.org/topic/4327/cisco-logging-and-log-parserRSS for NodeFri, 13 Nov 2026 14:00:59 GMTThu, 25 Feb 2016 20:59:24 GMT60<![CDATA[Reply to CISCO Logging and Log Parser on Mon, 29 Feb 2016 14:15:53 GMT]]>You can send parameters to the event from the Syslog Parser using standard regex capture groups.

For example regex

.*SPANTREE-2-BLOCK_BPDUGUARD: (.*)

Would send the rest of the message (what gets captured inside the brackets) to the event.
Configure the parameters to 1, and handle the rest in EPP/action.

]]>https://forum.netxms.org/post/19317https://forum.netxms.org/post/19317Mon, 29 Feb 2016 14:15:53 GMT