MonitorWare Knowledge Base

Hi,

I´m using WinSyslog and my intention is to pipe all the logs that I receive into a Database.

I have seen that WinSyslog includes a Database called "winsyslg97.mdb". When I open it, the system warns me that it´s created with a previous version of Microsoft Access and it tells me how to convert it into the new version. Once I do that, a new database is created (it has the same structure as the old one, but a different name).

I have followed the step-by-step guide on http://www.monitorware.com/Common/en/st ... -MWA12.php to create the RuleSet using my database and I have created a new service with the following configuration:

- Protocol Type: UDP
- Listener Port: 514
- Enable RFC 3164 Parsing
- RuleSet to use: Database Logging (this is the one I have created)

The only difference I have noticed during that process is that the Database I had to insert in the System DNS wasn´t located at C:\program files\MonitorWare\Agent\sample97.mdb .It was located at c:\program files\WinSyslog\MyDataBase.mdb .

After that I erased the Default RuleSet and the Default Running Service.

Then I run InteractiveSyslogServer and I send some logs to the PC. I see they are arriving correctly because they appear on that application, but they don´t get inserted into the database.

The (obvious) question is: How can I make it work?

Thanks to everybody.

Hi,

Do you get any error from WinSyslog into your Windows Event Log?

Best regards,
Michael Meckelein
Adiscon

mmeckelein wrote:Hi,

Do you get any error from WinSyslog into your Windows Event Log?

Best regards,
Michael Meckelein
Adiscon

No, nothing abnormal happens.

Please do the following:

1. Go to Computer Menu -> Export Settings to Registry-file
2. Save it
3. Go to General Options -> Enable Debug Output (check all checkboxes like "Error & Warnings", "Minimal", "Information", "Ultra")
4. Restart the service
5. Let it run for sometime, then disable the debug output
6. Zip this file and the Registry-file
7. Forward the zip file by email to support@adiscon.com

We are looking for the requested files.

Best regards,
Michael Meckelein
Adiscon

mmeckelein wrote:Please do the following:

1. Go to Computer Menu -> Export Settings to Registry-file
2. Save it
3. Go to General Options -> Enable Debug Output (check all checkboxes like "Error & Warnings", "Minimal", "Information", "Ultra")
4. Restart the service
5. Let it run for sometime, then disable the debug output
6. Zip this file and the Registry-file
7. Forward the zip file by email to support@adiscon.com

We are looking for the requested files.

Best regards,
Michael Meckelein
Adiscon

What do you mean by "Restart the service"? Activate InteractiveSyslogServer?

What do you mean by "Restart the service"? Activate InteractiveSyslogServer?

No, not Interactive Syslog Server. I meant the WinSyslog service which can be start by WinSyslog Configuration Client or by Administrative Tools -> services.

Maybe this is the issue. On which port have you Interactive Syslog server configured? Please note that the Interactive Syslog server and the WinSyslog service itself are two total diffrent tools. A quick overview for Interactive Syslog server can be found in the manual at
http://www.winsyslog.com/en/Manual/curr ... gserve.htm

However you configuration and the debug output may be helpful in any case. Please let me know if you need further assistance in order to provide the requested files.

mmeckelein wrote:

What do you mean by "Restart the service"? Activate InteractiveSyslogServer?

No, not Interactive Syslog Server. I meant the WinSyslog service which can be start by WinSyslog Configuration Client or by Administrative Tools -> services.

Maybe this is the issue. On which port have you Interactive Syslog server configured? Please note that the Interactive Syslog server and the WinSyslog service itself are two total diffrent tools. A quick overview for Interactive Syslog server can be found in the manual at
http://www.winsyslog.com/en/Manual/curr ... gserve.htm

However you configuration and the debug output may be helpful in any case. Please let me know if you need further assistance in order to provide the requested files.

Interactive Syslog Server is configured on port 10514. I will now send you an e-mail with both files.

Thanks for the help.

Hi,

I have already solved the problem and the logs are being inserted into the database correctly. I had a problem of concepts about how the application worked . Thanks for your interest in solving your customer´s problems.

Bye.