So you have created a host in JFF, you get the syslog messages from this host, but the messages are not assigned to this host? In what order did you do this, because the order should be: - create a host in JFF - install ntsyslog on Windows host and start sending messages. If you did it the other way round, then it's possible you get 'orphaned' syslog messages. When a host is sending syslog messages, but isn't created yet in JFF, then JFF processes the messages and assigns them to host 'unknown'. After you create the right host, the messages already assigned to 'unknown' will stay there, because they are already processed. New messages should be assigned to the correct host.
If new messages are not assigned to the correct host, then maybe somebody else has an answer (Javier?). (I'm just a JFF newbie myself.) Ruud -----Oorspronkelijk bericht----- From: "klx out" <[EMAIL PROTECTED]> To: [email protected] Date: Thu, 27 Oct 2005 23:06:18 +0200 Subject: [jffnms-users] event viewer Now I have event in event viewer of windows and in jffnms, but I need that in every message was assigned to the same host that generate the alarme. Event viewer say Error messae ... from ip, but in volum host appears unknow, how Can i show the host, the host is the smae than ip, and this host is created before. I need to assign messages from event viewer to correct hsot, because know is uncategoried Thanks ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today * Register for a JBoss Training Course Free Certification Exam for All Training Attendees Through End of 2005 Visit http://www.jboss.com/services/certification for more information _______________________________________________ jffnms-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jffnms-users
