Hi everybody, i am new at this forum but i´ve been using zenoss for a while.
The thing is that i have some issues with syslog processing for a particular model of 3com switches.
I opened this file:
/opt/zenoss/Products/ZenEvents/SyslogProcessing.py
where we can see regexs used to identify events components and distinguish host, timestamp, summary, etc.
3com model involved is 4500 with latest available firmware, the thing is how syslog are delivered, next i show an output took from origsyslog.log
Dec 02 15:34:04 2013 hub-pila-0005 %%10SHELL/5/CMD(l):- 1 -task:vt0 ip:10.223.168.132 user:sistemas command:display ver
With this particular device, i noticed that unit ID is sent right next to component string, this behaviour can not be modified within configuration itself, so the question is, has anybody been with something similar??
The file mentioned before shows that it spects an space between component and summary, this kind of log violates this behaviour.
I dont know how to manipulate this using a transform...
Currently on Zenoss 4.2.4 with latest SP available (SP179).
Any help would be appreciated, thanks in advance.
Regards,