It's so easy when you get the answer :) Can you provide more info about the regex part . I got as you said 2 part in my log I'm interested. I want the severity and also the message after that. Does multiline will be helpful with that? If you need any more info from my part I can provide some as needed.
Thanks François Veillette IT-GNS – Windows System Administrator Tel: 514-490-2045 francois.veille...@ubisoft.com -----Original Message----- From: Botond Botyanszki [mailto:b...@nxlog.org] Sent: 19 décembre 2013 17:38 To: nxlog-ce-users@lists.sourceforge.net Subject: Re: [nxlog-ce-users] Please help Hi, Try adding this: Exec $Hostname = hostname_fqdn(); \ $SourceName = 'myGame'; \ $Severity = 3; The severity values are as follows: DEBUG 1 INFO 2 WARNING 3 ERROR 4 CRITICAL 5 Probably the next step is to write a regexp to parse the log to extract the time, severity and the message properly. Regards, Botond On Thu, 19 Dec 2013 17:16:50 -0500 Francois Veillette <francois.veille...@ubisoft.com> wrote: > Hi all > > I tried to use nxlog to send from windows server to graylog2. > > I'm able now to send my event viewer log with im_msvistalog module and send > it with xm_gelf. > > I need to parse local log file and it's not working properly with > gelf... the host is not ok since it's use the netbios name of the > server instead of the fqdn of the server. I would love also to set a > custom facility and level field > > If someone can guide me I will appreciate a lot! I tried to google > stuff but can't figure it out :( > > My log file contain those kind of line.. the format is always the same: > > > (55b0,Da:2013-11-23 00:10:36|PID: 385886) WARNING > ClanHelperDAL.GetCLIDByPID No clan data for (PID 385886) > (5f58,Da:2013-11-23 00:11:06|PID: 385886) WARNING > GameSessionDAL.AddParticipants - PID is already a participant '(1062, > "Duplicate entry \'7197513-385886\' for key \'PRIMARY\'")' in session > GameSessionKey(m_typeID = 1L, m_sessionID = 7197513L) > (405c,Da:2013-11-23 00:11:19|PID: 75748) WARNING > GameSessionDAL.AddParticipants - PID is already a participant '(1062, > "Duplicate entry \'7197520-75748\' for key \'PRIMARY\'")' in session > GameSessionKey(m_typeID = 1L, m_sessionID = 7197520L) > (1448,Da:2013-11-23 00:11:35|PID: 412436) WARNING > ClanHelperDAL.GetCLIDByPID No clan data for (PID 412436) > (72e8,Da:2013-11-23 00:11:36|PID: 412436) WARNING > ClanHelperDAL.GetCLIDByPID No clan data for (PID 412436) > (5a1c,Da:2013-11-23 00:11:37|PID: 440070) WARNING > ClanHelperDAL.GetCLIDByPID No clan data for (PID 440070) > > My nxlog config look like this: > > ## This is a sample configuration file. See the nxlog reference manual > about the ## configuration options. It should be installed locally and > is also available ## online at > http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html > > ## Please set the ROOT to the folder your nxlog was installed into, ## > otherwise it will not start. > > define ROOT C:\Program Files (x86)\nxlog > > Moduledir %ROOT%\modules > CacheDir %ROOT%\data > Pidfile %ROOT%\data\nxlog.pid > SpoolDir %ROOT%\data > LogFile %ROOT%\data\nxlog.log > LogLevel info > > <Extension gelf> > Module xm_gelf > </Extension> > > <Input eventviewer-in> > Module im_msvistalog > </Input> > > <Input rdv-in> > Module im_file > File "D:\RV\Sandboxes\R*.log" > InputType LineBased > ReadFromLast True > Recursive True > </Input> > > <Output out> > Module om_udp > Host msr-log-graylogvip01.ubisoft.onbe > Port 12201 > OutputType GELF > </Output> > > > <Route 1> > Path eventviewer-in => out > </Route> > > <Route 2> > Path rdv-in => out > </Route> > > > [cid:image001.jpg@01CEFCDE.1B00CE60] > > François Veillette > IT-GNS - Windows System Administrator > Tel: 514-490-2045 > francois.veille...@ubisoft.com<mailto:francois.veille...@ubisoft.com> > > > ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
