• State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 38 subscribers
  • Views 130 views
  • Users 0 members are here
Options
Related
This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Syslog server in NPM

Geoo

I have been asked to test the syslog server built into Orion NPM.  We'd like to use it as the one place that messages go to, and then we could search them for relavent messages.

The problem is that the search boxes do not seem to operate the way I would expect.  For example, some of our messages (in the text of the message) refers to a specific device by IP address.  So I clicked in message pattern (since the IP reference is in the text of the message) and I would expect that it would filter out any messages that do not have that text in the message.  However it doesnt do that, it doesnt display any messages at all.

Any advice appreciated.  I would love to recommend Orion as the solution for our syslog need, but I'm not convenced myself yet.

  • 0

    May have answered my own question.  I read through the documentation but I never read that you needed to use the "%" to limit your criteria.

    Where in the documentation could I find other switches like the % character?

  • 0

    My first experience with Orion's SYSLOG was terrible, but that was using NPM 8.x. It wasn't until around release NPM 9.1 SP5 that I tried it again and it works like a charm.

    You probably need to set up any RULE in the Orion interface named SYSLOG VIEWER. This is the area I define all my filtering and it always works and is very stable. I probably have over 500,000 events per day.

    The filter choices used in the Orion website view do work but it's just not user-friendly and I feel needs many improvements, not for functionality but for presentation.

  • 0 in reply to Geoo

    I've found that < .* > works (like regex).
    FYI

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification Media Vault Link Accounts
About THWACK Blogs For Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2024 SolarWinds Worldwide, LLC. All Rights Reserved.