Aforsythe

dexml, My workstation is too poor to have any cache (ba-dun-dun-ching). I get the same result though, it switches to guest25, and then sits and spins. code: [a:a] IE 8, XPSP3

Awesome, glad it worked for you!

It’s not a trivial task, and the only reason I mentioned it is because there are other products that can simplify what you’re wanting or even make it irrelevant. LEM comes to mind immediately. I doubt that this functionality will ever be added as a configurable portion of Kiwi, but if that’s all you have and that’s what…

Ahh… I see. I was using the service manager console that ships with Kiwi. It has different displays you can setup. But… If you are still using Kiwi and this is a permanent filter (IE you never want to see these messages) and you want to use SAM, just setup the filter in the Kiwi setup prior to forwarding the syslogs to…

Glad I could help Bill.If you have any other questions feel free to post them.

Perl scripts are working for me and I thought I was on the latest version. I’ll check to make sure, but I tested several scripts before responding to the post.

Kevin, I was going to ask if Kiwi supports 64-bit Perl, but you've already responded with the fact that it works with a test string that you pass in manually, but fails as you're trying to parse actual messages. That message essentially means that there is a problem with one of your functions or object properties. But it…

Greg, Sorry my post was confusing, I don't have it backwards, but I just wanted to cover both bases just in case I did have it backwards. If you are seeing the SNMP messages in the Kiwi Web access, then it is already getting through and being accepted by the Kiwi service. So your SNMP setup at the bottom under inputs is…

You're welcome, Glad I could help.

It would give me a reason to get back to Austin... It would be in Austin right?

If you're asking how to setup different displays for them, just create a new rule as a copy of the default rule. Add a filter for each device rule, I will filter by IP address when I want to seperate each device, then set a different display number for each rule. If the problem is that you're only seeing one device in the…

You're welcome! Glad I could help

I just looked and it looks like I deleted both confirmations when I got the buttons... I'll have to be more careful with those I guess.

You’re the lucky one. I didn’t even get to look inside mine. It was claimed and stashed before I got home. I’ve tried grounding, begging, ransom, back-mail baby pictures, etc… It must be a really good backpack.

Thanks Bronx, unfortunately that's exactly what I did not want to do... Why recreate the statistics with custom variables when the program is tracking them already. I wanted to use the values that already exist in the statistics like: Message count by Severity Message count by Host Program Up-Time Total Messages This hour…

You can also do the same thing via script, and options are always nice, especially if you aren't running something like MS SQL. Here's the VbScript equivilant for the SQL database Function Main() Dim mConnection Set mConnection = CreateObject("ADODB.Connection") mConnection.Open "Provider=SQLOLEDB.1;Password=Whatever;User…

oss, I've got to strip out some specifics, but I have a script that does something similar to what you're looking for. I just get an hourly report on it instead of acting on it, but it's still collecting the same data you're looking for. It's not going to help you much unless you're comfortable scripting because you'll…

Thanks for the reply bshopp, but I may have jumped the gun and the function might be supported, it did not make sense that some functions would not be supported, but I'm really not fluent in Javascript. The error I received might have also been misleading... "Object Doesn't support this property or method on line: 0" Which…

xpetezx, Sorry, I have no idea what is causing your problem, but I do have a potential solution. Use batch, Powershell, or VBScript to move your files instead of Kiwi. Pick your poison, they will all do the job and could potentially do it better than Kiwi, but you could still use Kiwi to kick them off rather than the…

Thanks for the quick answer Chris! I have not personally run across any devices that are not supporting RFC 3164 yet, but I'm sure we will see more and more. Especially since the message content is structured. Here's how I would go about handling it though... Setup Option under Inputs \ UDP - Support for RFC 5424 [] check…

ttiller, I'm using the forwarder for multiple servers as well with no problems. Running in both 2003 and 2008 (32 and 64 bit). The only reason I can see (setup wise) that it would not forward event logs under those conditions and would generate a test but not forward... is if the syslog server is not created in the syslog…

I was interested in following an entire space and not just specific threads. People ask questions intermittently and sometimes wait for a response, it’s not a very active space so I wanted to keep tabs on it. I don’t always have the answers, but I do try to be helpful.

Well You’re welcome, but I didn’t really help. Your first rule should have worked, the complex filter is essentially read as: Include (“” OR “” OR “” OR “”) AND (“” OR “” OR “” OR “”) At least that’s my understanding of it and how I’ve seen it work.

That might make a difference, but it shouldn’t. The reason I asked about other filters is because Include filters exclude everything else, and Exclude filters include everything else. It always seemed a little backwards to me, and I’ve seen others on the forums that get confused by the way it works. If you didn’t have any…

I apologize, I was responding via E-mail and didn't notice the image link. I have to log in to view them. Your filter seems fine compared with the syslog message sample you provided. Do you have any other filters in the same rule? And if so, what type? Screenshots for those would be helpful.

They added underwear to the store now?!? Sweet! Wait… Please community, no pictures of you in your Thwack boxers ok? Seriously. Just Don’t.

I was trying to figure out what the heck you were talking about... Should I be concerned that my home space/forum doesn't generate enough content to even have a "more" link? Lolmaybe?

I would be happy to script this even without a fee, I just don't have the time at the moment. Also, make sure you understand, the original poster was wanting to track event logs forwarded from computers with dynamic IP addresses, I don't know that there are any good reasons to have switches or other network devices use…

Alright, I've got kiwi installed on 2k8 now as well, and the only issue I had was getting the console to start the service. For some reason, it can stop the service, but it doesn't even error out when attempting to restart and there are no errors or eventlogs regarding this issue. I can start the service manually though,…

Thanks spugatch! That's not the one I was looking for, but you got me in the right direction. I know there are product pitches behind these webinars but they are still very informative and there is a lot of info provided that's not product specific. Kudos to SW.