RE : [jffnms-users] New event type: parsing problem

LIMA David Tue, 22 Feb 2005 02:16:48 -0800

You are right Craig, the table was too large to feet in my mail so I cut it off, I have attached my sql export to this mail.

The message appears as "UNKNOWN" in JFFNMS events screen. �I don't understand why because it has to be matched by the "Windows error" which is in position 10 (after my new event which is in position 1)

�

_________________________________

�

David LIMA

Professional Services

�

www.scc.com

�

-----Message d'origine-----
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Craig Small
Envoy� : lundi 21 f�vrier 2005 22:36
� : [email protected]
Objet : Re: [jffnms-users] New event type: parsing problem

On Mon, Feb 21, 2005 at 06:54:32PM +0100, LIMA David wrote:

> I have created an Event type:

> | 10001 | APC�� | Warning�� | <info>�� | Always�� | X��

> | 10002 | Dell OM Warn�� | Warning�� | <interface>: <info> (ID:<state>)�� | Always�� | X��

> | 10003 | Dell OM Error�� | Big Fault | <interface>: <info> (ID:<state>)�� | Always�� | X��

> Syslog Events Types

> | 10002 | ^(administrator)\[warning\]\s*(\S+)\s*(\S.*)�� | 1�� |�� | 2�� |

You have not shown the whole table, for example the event type that is

used for this syslog match.

> The problem is when I have a message like this one: administrator[error] 1104� Fan sensor detected a failure value Sensor location: Front System Fan Chassis location: Main System Chassis Previous state was: Unknown Fan sensor value (in RPM): 0

> The message appears like this in the Events screen :

> C: administrator[error] 1104 Fan sensor detected a failure value Sensor location: Front System Fan Chassis location: Main System

What event type is this showing up as? Look at the type table.� The C:

might just be a random string rather than anything real. The syslog

rules drive which event type is created and what are the values for

interfaces, info, user etc.

� - Craig

Craig Small�� GnuPG:1C1B D893 1418 2AF4 45EE� 95CB C76C E5AC 12CA DFA5

Eye-Net Consulting http://www.enc.com.au/�� MIEE�� Debian developer

csmall at : enc.com.au�� ieee.org�� debian.org

-------------------------------------------------------

SF email is sponsored by - The IT Product Guide

Read honest & candid reviews on hundreds of IT Products from real users.

Discover which products truly live up to the hype. Start reading now.

http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click

_______________________________________________

jffnms-users mailing list

[email protected]

https://lists.sourceforge.net/lists/listinfo/jffnms-users





------------------------------------------------------------------------------------------



Ce message contient des informations dont le contenu est susceptible d'�tre confidentiel.

Il est destin� au(x) destinataire(s) indiqu�(s) exclusivement.



A moins que vous ne fassiez partie de la liste des destinataires, ou que vous soyez

habilit� � recevoir le mail � leur place, il vous est interdit de le copier, de l'utiliser

ou de d�voiler son contenu � un tiers.



Si vous avez re�u cet email par erreur, merci de prendre contact avec l'�metteur.



Les opinions exprim�es dans cet e-mail sont celles de l'�metteur et ne refl�tent pas

n�cessairement celles de l'entreprise.



Ce e-mail peut contenir des pi�ces jointes dont certaines pourraient contenir des virus

qui pourraient endommager votre syst�me informatique.



La compagnie a pris toutes dispositions afin de minimiser ce risque et d�cline toute

responsabilit� pour toute perte ou dommage r�sultant directement ou indirectement de

l'utilisation de cet email ou de son contenu.



Il vous appartient d'effectuer vos propres contr�les anti-virus avant d'ouvrir

la ou les pi�ces jointes.

------------------------------------------------------------------------------------------

sql-extract
Description: sql-extract

RE : [jffnms-users] New event type: parsing problem

Reply via email to