Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Flatly)
  • No Skin
Collapse
Brand Logo

NetXMS Forum

  1. Home
  2. Support
  3. Windows event parser stopped working

Windows event parser stopped working

Scheduled Pinned Locked Moved Support
3 Posts 2 Posters 7.1k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    M
    mashedpotatorocket
    wrote on last edited by
    #1

    Windows event parser suddenly stopped parsing my rules. I even tried to wipe all rules and just create the most simple rule (below), but no NetXMS Events are created. I still see the log entries in Windows Event Log (in NetXMS).

    What might have happened, or how can I debug this to find a resolution?

    Using NetXMS 4.2.395.

    Best regards

    <parser name="ParserNEW">
      <macros/>
      <rules>
          <rule name="">
            <match repeatInterval="0" reset="false">.*</match>
            <event>TEST_EVENT</event>
            <agentAction action=""></agentAction>
          </rule>
      </rules>
    </parser>
    
    1 Reply Last reply
    0
    • F
      F
      Filipp Sudanov
      wrote on last edited by
      #2

      It's a bug introduced in 4.2. It affects syslog and windows event log processing in fields "source" and "tag".

      Bug is fixed, will be in next patch release. 

      Meanwhile you can put * character in source, it should work that way.

      1 Reply Last reply
      0
      • M
        M
        mashedpotatorocket
        wrote on last edited by
        #3

        @filipp-sudanov said in Windows event parser stopped working:

        Meanwhile you can put * character in source, it should work that way.

        Yes, it did work. Thank you.

        1 Reply Last reply
        0

        Hello! It looks like you're interested in this conversation, but you don't have an account yet.

        Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

        With your input, this post could be even better 💗

        Register Login
        Reply
        • Reply as topic
        Log in to reply
        • Oldest to Newest
        • Newest to Oldest
        • Most Votes


        • Login

        • Don't have an account? Register

        • Login or register to search.
        Powered by NodeBB Contributors
        • First post
          Last post
        0
        • Categories
        • Recent
        • Tags
        • Popular
        • Users
        • Groups