KS-Soft. Network Management Solutions
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister    ProfileProfile    Log inLog in 

Event log Tune-Up variables

 
Post new topic   Reply to topic    KS-Soft Forum Index -> Wish list
View previous topic :: View next topic  
Author Message
Kris



Joined: 12 May 2010
Posts: 375

PostPosted: Fri Apr 23, 2021 2:00 am    Post subject: Event log Tune-Up variables Reply with quote

We use HM to detect Windows events, i.e. OWA login failures.
It would be nice to be able to extract relevant items from the event, like:

Example:
%Account Name%
%Failure Reason%
%Source Network Address%

Or maybe even create your own library of variables.
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12791
Location: USA

PostPosted: Fri Apr 23, 2021 2:18 pm    Post subject: Reply with quote

There are thousand different formats (messages) in Windows event log, how to create variables for each event?
We can add some operators for processing..

Where do you want to use such data?
- Optional status processing?
- Expression to start "advanced" action?
- parameters of some action (e.g. e-mail template)?

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
Kris



Joined: 12 May 2010
Posts: 375

PostPosted: Sun Apr 25, 2021 10:10 am    Post subject: Reply with quote

Hi Alex,

The data I mentioned would be handy to tune up the reply, so the quick-log shows these fields instead of the normal reply.
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12791
Location: USA

PostPosted: Mon Apr 26, 2021 1:13 pm    Post subject: Reply with quote

We added new operators:
- getlinewith
- getlinestarts
- getlineends
- gettagval

So you may use expression like ["%SuggestedReply%" getlinewith "Account Name:"]

If you are using version 12.84, contact support@ks-soft.net, we will provide update.

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
Kris



Joined: 12 May 2010
Posts: 375

PostPosted: Wed Apr 28, 2021 2:40 am    Post subject: Reply with quote

Thanks Alex!

Email sent
Back to top
View user's profile Send private message
Kris



Joined: 12 May 2010
Posts: 375

PostPosted: Wed Apr 28, 2021 4:26 am    Post subject: Reply with quote

Hi Alex,

The following operators won't help in my specific case.
- getlinewith
- getlinestarts
because the line I'm looking for (containing "Account Name:") appears multiple times. I need the second occurrance....

Not sure on how to use the 'gettagval' operator?
Is this the XML tag?
Something like:
["%SuggestedReply%" gettagval "<Data Name='TargetUserName'>"]
But that doesn't seem to work...

Thanks!
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12791
Location: USA

PostPosted: Wed Apr 28, 2021 6:59 am    Post subject: Reply with quote

You can use several commands in expression.
Please send to support example of text you want to parse and field you need to get.

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
Kris



Joined: 12 May 2010
Posts: 375

PostPosted: Wed Apr 28, 2021 7:57 am    Post subject: Reply with quote

Email sent
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    KS-Soft Forum Index -> Wish list All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

KS-Soft Forum Index