> Leonardo Vaz
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Vernooij, Kees (ITOP NM) - KLM
> Sent: Thursday, December 05, 2019 3:45 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Syslog Message Normal
Subject: Re: Syslog Message Normalization
I think there is a difference in multi-line messages (where each line is
identified by an id, '808' in the example below) and long messages that are
spread in syslog over more than 1 line. I think your example belongs to the
latter.
MR000 MVSC 19339
I’m processing syslog messages and I’d like to combine multi-line messages
into a single entry before processing the entries.
Matt,
DFSORT has the capability of combining multiple lines into a single line
using WHEN=GROUP. You can easily identify the continuation line as it
will NOT have the
Kees.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Matt Hogstrom
Sent: 05 December 2019 02:28
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Syslog Message Normalization
I’m processing syslog messages
vices
z/OS Systems
Tel +31 6 10 14 58 78
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of ITschak Mugzach
Sent: 05 December 2019 05:26
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Syslog Message Normalization
"31" in your sample i
"31" in your sample is the correlation id of the original message. I can't
see it in the original line in your sample, but it is there. it is not part
of the message and you have to drop it from the concatenated line.
ITschak
On Thu, Dec 5, 2019 at 3:28 AM Matt Hogstrom wrote:
> I’m processing
I’m processing syslog messages and I’d like to combine multi-line messages into
a single entry before processing the entries. For instance, these messages
N 002 PROD 19111 16:00:40.08 JOB08657 0090 +=== SUSPEND PROGRAM
FOR 02 SECONDS. ===
N 0004000 PROD 19111 16:00:40.08
