Skip to:
Hello,
The default forwarding-regexp is:
forwarding-regexp="^.*\s(19|20)\d\d([-/.])(0[1-9]|1[012])\2(0[1-9]|[12][0-9]|3[01])(\s+)(\S+)(\s)(\S.+)"
However, this only matches messages that contains the format YYYY-MM-DD. The default syslog format ismore something like this:
Jul 18 17:41:10 gwvlan-producao 56455: Jul 18 20:41:09.766: %SEC-6-IPACCESSLOGP: list gray-to-4 denied tcp 10.9.1.65(2496) (Vlan1000 0016.3e4c.d69d) -> 10.48.200.10(55807), 1 packet
Please, use a more broad expression as default filter like:
forwarding-regexp="^((.+?) (.*))\r?\n?$"
http://www.opennms.org/wiki/Syslogd
This problem should be eliminated as soon as we switch over to using the RadixTreeSyslogParser as the default implementation.
Hello,
The default forwarding-regexp is:
forwarding-regexp="^.*\s(19|20)\d\d([-/.])(0[1-9]|1[012])\2(0[1-9]|[12][0-9]|3[01])(\s+)(\S+)(\s)(\S.+)"
However, this only matches messages that contains the format YYYY-MM-DD. The default syslog format is
more something like this:
Jul 18 17:41:10 gwvlan-producao 56455: Jul 18 20:41:09.766: %SEC-6-IPACCESSLOGP: list gray-to-4 denied tcp 10.9.1.65(2496) (Vlan1000 0016.3e4c.d69d) -> 10.48.200.10(55807), 1 packet
Please, use a more broad expression as default filter like:
forwarding-regexp="^((.+?) (.*))\r?\n?$"
http://www.opennms.org/wiki/Syslogd