Skip navigation
2128 Views 7 Replies Latest reply: Jul 16, 2012 3:38 PM by ssmiley RSS
ssmiley Rank: White Belt 9 posts since
May 9, 2012
Currently Being Moderated

Jul 13, 2012 8:35 AM

Mapping event class from /Unknown and changing the summary field

I have some syslog logs coming into Zenoss that I want to setup some alerts for. Right now all syslog comes in with the event class /Unknown, I want to be able to change that depending on what log comes in and possibly change the summary field. For instance I have logs that come in with a long string and in the middle it tells you what the event is (SSH Fail) and there are different ones, I would like that to just be the summary and not all the other text and depending on the summary name change the event class.

Any help is appreciated

 

Cheers,

    Steve

More Like This

  • Retrieving data ...

Legend

  • Correct Answers - 4 points
  • Helpful Answers - 2 points