preserving time stamps

Support, Questions and Discussions on MonitorWare Agent

Moderator: alorbach

Google Ads


preserving time stamps

Postby jcoder » Mon Feb 26, 2007 8:33 pm

hi again,
I am moving log files from a windows based box into a syslog server, each of the events in these log files have a timestamp on them but when i send them across to the syslog server the present time shows up and not the original timestamp at which the event occured.

Waiting eagerly for ur reply

Regards
Jcoder
jcoder
Avarage
 
Posts: 10
Joined: Tue Feb 20, 2007 3:11 pm

Postby alorbach » Tue Feb 27, 2007 9:45 am

Hi,

you want the original timestamp of the EventLog Message to become the first timestamp in the Syslog message?
I am afraid this will not be possible. But the original TimeStamp can be added into the message by using a custom message format like this (in the Syslog Action):

Code: Select all
Time: %timegenerated% - Message: %msg%


regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Postby jcoder » Tue Feb 27, 2007 8:55 pm

hi,
Thanks for the prompt reply, that partly solves my problem. I was using a single monitorware agent to get the log files into the syslog server i have and the syslog server shows the log files to be coming from a single source ( the machine ip on which the central monitorware is located), i was wondering if the monitorware could preserve a host stamp of the computers where the data was being monitored by it and send this as a host stamp along with the log files it forwards to the syslog server.

Regards
Jcoder
jcoder
Avarage
 
Posts: 10
Joined: Tue Feb 20, 2007 3:11 pm

Postby friedl » Wed Feb 28, 2007 4:41 pm

Hello,

Could you please tell us what you mean with "hoststamp"?
And what kind of logs are your "log files"? Are these text file logs or windows event logs?

We will take care of this, but need this information.

Regards,
Florian Riedl
friedl
Adiscon Support
 
Posts: 67
Joined: Wed Sep 13, 2006 2:31 pm

Postby jcoder » Mon Mar 05, 2007 3:05 pm

hi,
These are test file based logs generated by a jboss application server.

Regards
jcoder
jcoder
Avarage
 
Posts: 10
Joined: Tue Feb 20, 2007 3:11 pm

Postby friedl » Tue Mar 06, 2007 12:59 pm

Ok, so to get this right:

You have text file logs created by your jboss application server. You want these logs to be forwarded by MonitorWare Agent (File Monitor) to a syslog server. The syslog message you receive should have the IP or hostname of the messages origin server as the sender.

Is this correct so far?

Could you please be so kind and send us some sample logs of jboss application server, so we can take a look into it?
Please compress them (zip, rar, tar.gz) and upload them to our anonymous ftp at hetzner.adiscon.com. Be sure to change to the /incoming directory!

Regards,
Florian Riedl
friedl
Adiscon Support
 
Posts: 67
Joined: Wed Sep 13, 2006 2:31 pm

Google Ads



Return to MonitorWare Agent

Who is online

Users browsing this forum: No registered users and 0 guests

cron