Programmatically add syslog rules to Orion Log Viewer

We have over 500 syslog rules that need to be added to Orion Log Viewer. Is there a way to do this programmatically?

  • There is an "ImportRules" verb under Orion.OLM.ProcessingRule in the API. It looks like "Read" is the only CRUD option available on Orion.OLM.ProcessingRule, so this import looks to be the only option via the API. You'd have to format your rules into the required JSON format in order to import them, which you should be able to do in PowerShell (or the language of your choice). If you manually create a rule or two, you can export them to JSON through the UI to see the format (Settings > All Settings > Log and Event Settings > Export All Rules).