NetXMS Forum

I am using NetXMS Managemente Console 1.2.2 on Windows 7 to (try to) configure a remote NetXMS server.

The NetXMS server is 1.2.2 as well and it is hosted on a Windows 2003 Server R2 Enterprise Edition.

I am trying to configure the syslog parser, but I experience the following issues:

• I am not able to remove a rule added via the Editor
• I am not able to save any change applied to the parser, in both cases of Editor or XML editing

How can I modify the Syslog Parser configuration?

Thank you in advance

Francesco

I enabled parser tracing; I manually edited the file; The result follows.

Begin of the file ------
This line in manually added with an ERROR
This is another line with an ERROR
ERROR line

End of file-------

Standard output begin------
....
<Here first line was added>
[10-Apr-2012 19:17:11] LogParser: new data avialable in file "c:\Windows\Tasks\SchedLgU.txt"
...
<Here second line was added
[10-Apr-2012 19:17:31] LogParser: new data avialable in file "c:\Windows\Tasks\SchedLgU.txt"
[10-Apr-2012 19:17:31] Match line: "
[10-Apr-2012 19:17:31] checking rule 1 ""
[10-Apr-2012 19:17:31]  rule has no context
[10-Apr-2012 19:17:31]  matching against regexp ERROR
[10-Apr-2012 19:17:31]  no match
[10-Apr-2012 19:17:31] Processing stopped at end of rules list; result = false
....
<Here third line was added. Notice that \n is present at the end of the line>
[10-Apr-2012 19:17:46] LogParser: new data avialable in file "c:\Windows\Tasks\chedLgU.txt"
[10-Apr-2012 19:17:46] Match line: "
[10-Apr-2012 19:17:46] checking rule 1 ""
[10-Apr-2012 19:17:46]  rule has no context
[10-Apr-2012 19:17:46]  matching against regexp ERROR
[10-Apr-2012 19:17:46]  no match
[10-Apr-2012 19:17:46] Processing stopped at end of rules list; result = false
[10-Apr-2012 19:17:46] Match line: ""
[10-Apr-2012 19:17:46] checking rule 1 ""
[10-Apr-2012 19:17:46]  rule has no context
[10-Apr-2012 19:17:46]  matching against regexp ERROR
[10-Apr-2012 19:17:46]  no match
[10-Apr-2012 19:17:46] Processing stopped at end of rules list; result = false
....
Standard output end ----

Agent versione: 1.1.10
Operating system: Windows Small Business Server SP2

I installed the 1.1.10 agent but unfortunately nothing changed.
Any other solution?

Thanks

Francesco

I'm trying to watch the System Eventlog in Windows for error events.

I manually add a new error event, while the agent is running in debug mode (level 9).

This is what I can see

[09-Apr-2012 12:46:30] LogWatch: unable to load event source "System" for log "System"

Agent versione is: 1.0.13
Operating system is: Windows 2003 Enterpirse R2

Does anyone have any clue?

I'm trying to watch the log of Windows Scheduled Task.

The file to watch is c:\Windows\Tasks\SchedLgU.txt

The (very basic) parser file I use is
Begin file ----------
<parser>
    <file>c:\Windows\Tasks\SchedLgU.txt</file>
    <rules>
        <rule>
            <match>ERROR</match>
            <event>100002</event>
        </rule>
    </rules>
</parser>
End File -----------

Agent version is: 1.0.13
Operating system is: Windows 2003 server R2

I started the agenti in debug mode (level 9) and I cannot see anything happening.