Hello we have a firewall device that is submitting syslog events to zenoss but no eventClassKey is set. Is there a way to set the eventClassKey using the mappings rather than having 15 defaultmapping's 1 for each type of syslog entry .
typical log line date=2007-11-12 time=09:00:12 devname=fw0 device_id=FGT5002803030381 log_id=0100020101 type=event subtype=system pri=critical vd=root msg="This is the message string" I'd like to be able to say if you see a syslog line like above set the eventClassKey to XXXXX. Then have it use XXXXX to map the event. thanks -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=13190#13190 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
