I am having a problem with receiving Snare Agent (using syslog) messages from
my Windows hosts. I am using Snare agents because WMI is so problematic to set
up at the moment.
The warnings in the syslog log are:
2007-06-05 11:50:44 WARNING zen.Syslog: parseTag failed:'myhost.domain.com
MSWinEventLog 1 Application 1 Tue Jun 05 11:50:40 2007
108 SNARE Unknown User N/A Information MYHOST None
The service was stopped. 0'
2007-06-05 11:50:45 WARNING zen.Syslog: parseTag failed:'myhost.domain.com
MSWinEventLog 1 Application 2 Tue Jun 05 11:50:42 2007
105 SNARE Unknown User N/A Information MYHOST None
The service was started. 1'
These events are never parsed into the events for myhost. I thought perhaps
adding 'parsehost' to the configuration of syslog would help, but all it did
was produce the following warnings:
2007-06-05 11:52:40 WARNING zen.Syslog: parseTag failed:'MSWinEventLog 1
Application 1 Tue Jun 05 11:52:33 2007 108 SNARE Unknown User N/A Information
MYHOST None The service was stopped. 0'
2007-06-05 11:52:41 WARNING zen.Syslog: parseTag failed:'MSWinEventLog 1
Application 2 Tue Jun 05 11:52:35 2007 105 SNARE Unknown User N/A Information
MYHOST None The service was started. 1'
Some of the SNARE events are making it into the logs, so I am assuming it is
some sort of event mapping problem, but I cannot find any relevant information
in the documentation or the forums that has pointed me in a useful direction.
Can anyone give me a pointer as to why these events aren't making it to the
proper event logs?
------------------------
Dave Cushing
-------------------- m2f --------------------
Read this topic online here:
http://community.zenoss.com/forums/viewtopic.php?p=6867#6867
-------------------- m2f --------------------
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
