MonitorWare Knowledge Base

To WinSyslog Community,

I'm struggling with an WinSyslog phenomenon - probably somebody out there got an idea.

Environment:
- Windows 2000 Prof. with SP4
- WinSyslog 5.2 SP1

Setup:
- just a Default Syslog Service
- One RuleSet with two Rules, both write to files

Summary:
- Writing to the first file within a Ruleset = fine
- Writing to an additional file (either within a rule or another rule) getting "unkown error" in debug file.

I tried several combinations of rules and files with different formats etc. - without success.

Any ideas how to fix, or at least howto tell WinSyslog to explain the "unkown error"?

Regards,
AMas

Extracts of Full Debug Output:

[Write all Syslog Events to file - runs fine]:

in CActionSendSyslog::doAction()
Target 127.0.0.1 - 0100007f set
out CActionSendSyslog::doAction()
CActionListEntry::CallAction, ID 1003
CActionConfigWriteFile| GeneratedFilename: E:\WinSyslog_Protokolle\WinSyslog_Protokoll_-2004-11-02.log
matching.

[Writing a second file receives an error]:
CActionListEntry::CallAction, ID 1003
CActionConfigWriteFile| GeneratedFilename: E:\WinSyslog_Protokolle\WinSyslog_FW_Mailtraffic.log
Unknown error while applying the actions - continuing

Hi,

are you using any kind of filters, any special characters in the FileName property in the second Rule.

An export of your configuration would also be helpful, kindly send it together with an reference to this forum post to support AT adiscon.com

Hi there,

>are you using any kind of filters, any special characters in the FileName property in the second Rule.
Nop - nothing at all.

Meanwhile I uninstalled and re-installed WinSyslog, created all the rules again (no import) - same story again. It seems that there is a connection with Webtrend format and this behaviour..

>An export of your configuration would also be helpful, kindly send it >together with an reference to this forum post to support AT adiscon.com

Sure - is there a public key for the mail adress "support AT adiscon.com" to send the configuration encrypted?

Regads,
AMas

We don't have a public key available, but we have a secure web response form you can use to send us the data:
https://secure.adiscon.com/tools/webresponse.asp

I am sorry, there currently is no public key for that email address. But you can transmit this securely via our SSL protected web response system at:

https://secure.adiscon.com/tools/webresponse.asp

Best regards,
Rainer Gerhards
Adiscon

No prob.

I will send you the configuration via Adiscon SLL Web response(BTW great idea!). I will try to copy and past the exported registry stuff to the form.

Best,
AMas