Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

drop syslog messages before they are captured by the Syslog Statistics

Hi there.

I have made a rule to filter "access-list logging rate-limited" "list 100 permitted" and Actions "Stop Processing message". But it seems that the message still appears under Top 20 Hosts in the Syslog Statistics.

Is it possible to remove the messages completely before it is captured by the program?

friendly greeting
Jens A Skage
Norway

I Am using Ver 9.2 of Kiwi Syslog

Find more posts tagged with

Accepted answers

All comments

Aforsythe

Jens,

Those statistics are calculated upon receipt of the message prior to any rules or filters. If you want stats that exclude those messages, you will need to build a script to collect your own stats after all of your filters. If you check the scripts that are available here for download, you will find the script that builds the daily statistics E-mail which was eventually included in an earlier version of Kiwi. Prior to that, scheduling that script to run was the method of getting that daily statistics e-mail. Although you no longer need the script for that, it was very helpful as a reference in creating my own statistics based on my own criteria and having it e-mail out to myself once an hour.