<![CDATA[Windows event parser stopped working]]>Windows event parser suddenly stopped parsing my rules. I even tried to wipe all rules and just create the most simple rule (below), but no NetXMS Events are created. I still see the log entries in Windows Event Log (in NetXMS).

What might have happened, or how can I debug this to find a resolution?

Using NetXMS 4.2.395.

Best regards

<parser name="ParserNEW">
  <macros/>
  <rules>
      <rule name="">
        <match repeatInterval="0" reset="false">.*</match>
        <event>TEST_EVENT</event>
        <agentAction action=""></agentAction>
      </rule>
  </rules>
</parser>
]]>https://forum.netxms.org/topic/7546/windows-event-parser-stopped-workingRSS for NodeFri, 13 Nov 2026 09:44:31 GMTMon, 31 Oct 2022 16:18:22 GMT60<![CDATA[Reply to Windows event parser stopped working on Thu, 03 Nov 2022 12:53:13 GMT]]>@filipp-sudanov said in Windows event parser stopped working:

Meanwhile you can put * character in source, it should work that way.

Yes, it did work. Thank you.

]]>https://forum.netxms.org/post/31997https://forum.netxms.org/post/31997Thu, 03 Nov 2022 12:53:13 GMT<![CDATA[Reply to Windows event parser stopped working on Tue, 01 Nov 2022 15:42:37 GMT]]>It's a bug introduced in 4.2. It affects syslog and windows event log processing in fields "source" and "tag".

Bug is fixed, will be in next patch release. 

Meanwhile you can put * character in source, it should work that way.

]]>https://forum.netxms.org/post/31978https://forum.netxms.org/post/31978Tue, 01 Nov 2022 15:42:37 GMT