I'm having my Cisco equipment log out to Solarwinds but when I search or view the live messages I'm missing the "%facility-severity-mnemonic" that typically precedes the message. I've done a packet capture and it shows up properly.
2338: Aug 29 10:10:07.232 CDT: %SYS-5-CONFIG_I: Configured from console by omgfakelogin on vty0 (omgfakeip)
Message Posted in Syslog Viewer
|8/29/2012 10:10:08 AM||omgfakehost||Notice||2338: Configured from console by omgfakelogin on vty0 (omgfakeip)|
Any one run into this before?
Haaa... I found it...
File > Settings > Message Parsing > [Uncheck] Remove Message Type from Syslog Messages
Thanks for looking!