Hey!

On Wed, Nov 3, 2010 at 4:19 PM, Rainer Gerhards
<[email protected]> wrote:
> Hi Sivan,
>
> that field is normally not used by rsyslog ;) The schema supports all of
> Adiscon's MonitorWare products. EventID is usually populated by the
> (commercial) Windows products, which store the Windows Event ID there. Having
> a common schema simplifies things, so I pulled the complete schema over.

Indeed, thanks for the note. That makes a lot of sense.

-Sivan
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to