• State Not Answered
  • Replies 1 reply
  • Subscribers 11 subscribers
  • Views 556 views
  • Users 0 members are here
Options
Related

Parsing windows log to simplify message text in kiwisyslog

youggss
11 months ago

Hi everyone,

I'm tring to find a script (or anything else) to simplify the message in kiwi syslog with no luck.

In kiwi we receive this :


Have i any chance to receive just somethin like that :


Message content would be computer name and juste the content of log (Test Message from Log Forwarder to the 'System' event log.), no the entire line with date, event categorie etc.


Thanks in advance for your help.

Parents
  • 0 11 months ago

    You can change the fields displayed in the console.  In the 'View' menu select 'Show/Hide columns', choose Hostname and Message.  This doesn't completely solve your issue...

    To actually change the message and display it you will need to write a small script that splits the message and then saves it. Most messages will have tab separated fields so that would be the place to start.  There is an example script called 'Script_SplitMessageIntoFields' that should get it started. Save the message part you want to the variable 'VarCleanMessageText'.  Make sure the script action is before the Display or Log to file actions.

    The script combined with the console change should then just show the sending hostname and portion of the message you saved.

Reply
  • 0 11 months ago

    You can change the fields displayed in the console.  In the 'View' menu select 'Show/Hide columns', choose Hostname and Message.  This doesn't completely solve your issue...

    To actually change the message and display it you will need to write a small script that splits the message and then saves it. Most messages will have tab separated fields so that would be the place to start.  There is an example script called 'Script_SplitMessageIntoFields' that should get it started. Save the message part you want to the variable 'VarCleanMessageText'.  Make sure the script action is before the Display or Log to file actions.

    The script combined with the console change should then just show the sending hostname and portion of the message you saved.

Children
No Data

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK© online community. More than 180,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification SolarWinds Lab Link Accounts
About THWACK Blogs Federal & Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2021 SolarWinds Worldwide, LLC. All Rights Reserved.