NetXMS syslog parsing

Slides and DEMO

SRC’s

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
	<formatVersion>4</formatVersion>
	<description>Events and Event Processing Rules For DiskLogger</description>
	<events>
		<event id="100017">
			<name>DC_DISKLOGGER_NORMAL</name>
			<guid></guid>
			<code>100017</code>
			<severity>0</severity>
			<flags>1</flags>
			<message>NORMAL: Normal state (%1 %%) on %2 partition</message>
			<description></description>
		</event>
		<event id="100016">
			<name>DC_DISKLOGGER_ALERT</name>
			<guid></guid>
			<code>100016</code>
			<severity>3</severity>
			<flags>1</flags>
			<message>ALERT: There is only %1  %% free space on %2 partition</message>
			<description></description>
		</event>
		<event id="100015">
			<name>DC_DISKLOGGER_WARNING</name>
			<guid></guid>
			<code>100015</code>
			<severity>2</severity>
			<flags>1</flags>
			<message>WARNING: There is only %1 %% free space on  %2 partition</message>
			<description></description>
		</event>
	</events>
	<templates>
	</templates>
	<traps>
	</traps>
	<rules>
		<rule id="42">
			<guid></guid>
			<flags>7944</flags>
			<alarmMessage>%m</alarmMessage>
			<alarmKey>DC_DISKLOGGER_WARNING_%i_%2</alarmKey>
			<alarmSeverity>5</alarmSeverity>
			<alarmTimeout>0</alarmTimeout>
			<alarmTimeoutEvent>43</alarmTimeoutEvent>
			<script></script>
			<comments>Generate alarm on DC_DISKLOGGER_WARNING</comments>
			<sources>
			</sources>
			<events>
				<event id="100015">
					<name>DC_DISKLOGGER_WARNING</name>
				</event>
			</events>
			<actions>
			</actions>
			<pStorageActions>
				<setValue>
				</setValue>
				<deleteValue>
				</deleteValue>
			</pStorageActions>
		</rule>
		<rule id="43">
			<guid></guid>
			<flags>7944</flags>
			<alarmMessage>%m</alarmMessage>
			<alarmKey>DC_DISKLOGGER_ALERT_%i_%2</alarmKey>
			<alarmSeverity>5</alarmSeverity>
			<alarmTimeout>0</alarmTimeout>
			<alarmTimeoutEvent>43</alarmTimeoutEvent>
			<script></script>
			<comments>Generate alarm on DC_DISKLOGGER_ALERT</comments>
			<sources>
			</sources>
			<events>
				<event id="100016">
					<name>DC_DISKLOGGER_ALERT</name>
				</event>
			</events>
			<actions>
			</actions>
			<pStorageActions>
				<setValue>
				</setValue>
				<deleteValue>
				</deleteValue>
			</pStorageActions>
		</rule>
		<rule id="44">
			<guid></guid>
			<flags>7976</flags>
			<alarmMessage>%m</alarmMessage>
			<alarmKey>DC_DISKLOGGER_.*_%i_%2</alarmKey>
			<alarmSeverity>6</alarmSeverity>
			<alarmTimeout>0</alarmTimeout>
			<alarmTimeoutEvent>43</alarmTimeoutEvent>
			<script></script>
			<comments>Terminate alarm on DC_DISKLOGGER_NORMAL</comments>
			<sources>
			</sources>
			<events>
				<event id="100017">
					<name>DC_DISKLOGGER_NORMAL</name>
				</event>
			</events>
			<actions>
			</actions>
			<pStorageActions>
				<setValue>
				</setValue>
				<deleteValue>
				</deleteValue>
			</pStorageActions>
		</rule>
	</rules>
	<scripts>
	</scripts>
	<objectTools>
	</objectTools>
	<dciSummaryTables>
	</dciSummaryTables>
	<actions>
	</actions>
</configuration>

<parser trace="0">
   <file/>
   <rules>
      <rule name="DiskLogger-warning">
         <match repeatCount="0" repeatInterval="120">* WARNING: There is (.*) % free space on: (.*)</match>
         <event params="2">100015</event>
         <facility>23</facility>
         <tag>DiskLogger</tag>
      </rule>
      <rule name="DiskLogger-alert">
         <match repeatCount="0" repeatInterval="120">*ALERT: There is (.*) % free space on: (.*)</match>
         <event params="2">100016</event>
         <facility>23</facility>
         <tag>DiskLogger</tag>
      </rule>
      <rule name="DiskLogger-normal">
         <match repeatCount="0" repeatInterval="120">*NORMAL: There is (.*) % free space on: (.*)</match>
         <event params="2">100017</event>
         <facility>23</facility>
         <tag>DiskLogger</tag>
      </rule>
   </rules>
   <macros/>
</parser>