I wanted to say thanks to all who responded to my question regarding parsing syslog files.

 

Thanks!

 

But, I was wondering about check_log. It seems that it would work for my environment. However I see that I have run into a snag of sorts.

 

I’m parsing out Cisco PIX logs, and was able to parse out “Deny” type logs successfully. However, I’m only getting part of the syslog message.

 

Here is what I receive in MySQL:

 

(36)    Mar  3 14:22:11 secure-primary Mar 03 2006 14:59:44:

 

If I look at the Nagios log (External Commands) I also see the “chopped” line, so it appears to be occurring during the parsing process.

 

Here is the syslog entry:

 

Mar  3 14:22:11 secure-primary Mar 03 2006 14:59:44: %PIX-4-106023: Deny udp src inside:10.xxx.xxx.xxx/12346 dst EXTRANET:192.168.xx.xx/12345 by access-group "inside"

 

It appears to be failing at the “%” on the syslog entry.

 

Thanks in advance,

 

Mike

 

Reply via email to