This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

How to Split Logs to Multiple Displays in Kiwi Syslog Server

jonathan_at_solarwinds over 10 years ago

SolarWinds's own Justin Finley just recorded a video tutorial that shows how to split logs into multiple displays in Kiwi Syslog Server.

<object id="flashObj" width="480" height="270" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,47,0"><param name="movie" value="http://c.brightcove.com/services/viewer/federated_f9?isVid=1&isUI=1" /><param name="bgcolor" value="#FFFFFF" /><param name="flashVars" value="videoId=2434498817001&playerID=703341187001&playerKey=AQ~~,AAAAo6yHyCk~,Sxq_urni6y6egyO0x3pdt32SAdDEpkyt&domain=embed&dynamicStreaming=true" /><param name="base" value="http://admin.brightcove.com" /><param name="seamlesstabbing" value="false" /><param name="allowFullScreen" value="true" /><param name="swLiveConnect" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://c.brightcove.com/services/viewer/federated_f9?isVid=1&isUI=1" bgcolor="#FFFFFF" flashVars="videoId=2434498817001&playerID=703341187001&playerKey=AQ~~,AAAAo6yHyCk~,Sxq_urni6y6egyO0x3pdt32SAdDEpkyt&domain=embed&dynamicStreaming=true" base="http://admin.brightcove.com" name="flashObj" width="480" height="270" seamlesstabbing="false" type="application/x-shockwave-flash" allowFullScreen="true" allowScriptAccess="always" swLiveConnect="true" pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"></embed></object>

External link to Jing: Multiple Displays - justinfinley's library

Video Guide:

0:00 Unfiltered display (Display 00)
0:10 Showing the rule that sends all messages to Display 00
0:20 Changing the unfiltered display from Display 00 to Display 05
0:25 Checking that the switch happened
0:35 Adding a new filter rule looking for the word "logon" and sending it to Display 01
1:20 Adding a new filter rule looking for the word "logoff" and sending it to Display 02
2:05 Checking that the new filters work
2:25 Renaming "Display 05" to "All Messages"
2:45 Renaming "Display 01" to "Logon" and "Display 02" to "Logoff"
3:10 Checking that the display renaming worked

Remember to "LIKE" this if you find it useful - that helps other find it too!