I added the following to the parsers section.

> 
> # Fortigate syslog
> r".* log_id=(?P<eventClassKey>\S+) .* msg=\"(?P<summary>.*)\"",
> 


This means that I can create mappings based on the log_id which is a 10 digit 
number, it is like a problem number or error code etc. I created some mappings 
for each log_id as it was logged. 

The device is a Fortigate Firewall not sure of the model etc




-------------------- m2f --------------------

Read this topic online here:
http://community.zenoss.com/forums/viewtopic.php?p=13885#13885

-------------------- m2f --------------------



_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users

Reply via email to