We use HM to detect Windows events, i.e. OWA login failures.
It would be nice to be able to extract relevant items from the event, like:
Example:
%Account Name%
%Failure Reason%
%Source Network Address%
Or maybe even create your own library of variables.
Event log Tune-Up variables
There are thousand different formats (messages) in Windows event log, how to create variables for each event?
We can add some operators for processing..
Where do you want to use such data?
- Optional status processing?
- Expression to start "advanced" action?
- parameters of some action (e.g. e-mail template)?
Regards
Alex
We can add some operators for processing..
Where do you want to use such data?
- Optional status processing?
- Expression to start "advanced" action?
- parameters of some action (e.g. e-mail template)?
Regards
Alex
Hi Alex,
The following operators won't help in my specific case.
- getlinewith
- getlinestarts
because the line I'm looking for (containing "Account Name:") appears multiple times. I need the second occurrance....
Not sure on how to use the 'gettagval' operator?
Is this the XML tag?
Something like:
["%SuggestedReply%" gettagval "<Data Name='TargetUserName'>"]
But that doesn't seem to work...
Thanks!
The following operators won't help in my specific case.
- getlinewith
- getlinestarts
because the line I'm looking for (containing "Account Name:") appears multiple times. I need the second occurrance....
Not sure on how to use the 'gettagval' operator?
Is this the XML tag?
Something like:
["%SuggestedReply%" gettagval "<Data Name='TargetUserName'>"]
But that doesn't seem to work...
Thanks!