We are using evtsys (http://code.google.com/p/eventlog-to-syslog/) to send 
the windows events to jffnms.

Found that we lost the source in the events.

Had to change the destination in syslog-ng config to:

destination d_jffnms {
        pipe ("/tmp/mysql.pipe"
              template("INSERT INTO syslog (date, date_logged, host, message) 
VALUES ('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FULLHOST', '$MSGHDR
$MSG');\n")
              template-escape(yes) );
        program ("mysql -u jffnms --password=<pass> jffnms < /tmp/
mysql.pipe");
};




------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
jffnms-users mailing list
jffnms-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jffnms-users

Reply via email to