FAQ

How to parse an EventReporter Syslog Message in Perl?

Created on 2001-02-16 by Andre Lorbach.

Simply use the sample script below. It shows you how to parse a single syslog message generated by EventReporter. You can cut it from the textbox below.

#!/usr/bin/perl
#####################################################################################################
#Copyright (C) 2001 by Adiscon GmbH * http://www.adiscon.com
#
#This software can be distributed freely and used without cost, as long as this copyright notice
#and disclaimer is retained unmodified. This script is free. Use it at your own risk. Adiscon will
#not be responsible for any problem you might encounter.
#####################################################################################################

use CGI qw (:standard);

# Just the TestMessage
$szEventReporterMessage = "EvntSLog: [ERR] Thu Feb 15 14:00:58 2001: FMSRV/Wins (4102) - \"The connection was aborted by the remote WINS. Remote WINS may not be configured to replicate with the server.\"";

#Call the Splitterfunction
&SplitEventLogMessage($szEventReporterMessage);

#-------------------------------------------------------
sub SplitEventLogMessage {
 my $szMessage = $_[0];
 my $szSeverityCode;
 my $szDate;
 my $szServer;
 my $szNTEventSource;
 my $szEventID;

print "------------------------------\n";
 print "DEBUG: $szMessage\n";
 print "------------------------------\n";
 $szMessage =~ s/EvntSLog: //gi; # Filter out the "EvntSLog: "

($szSeverityCode,$szMessage) = split(/ /,$szMessage,2); # Split the Severity Code out
 ($szDate,$szMessage) = split(/: /,$szMessage,2); # Split the Date out
 ($szServer,$szMessage) = split(/\//,$szMessage,2); # Split the Server out
 ($szNTEventSource,$szMessage) = split(/ /,$szMessage,2); # Split the NTEventSource

$szMessage =~ s/\(//i; # Filter out the "("

($szEventID,$szMessage) = split(/\)/,$szMessage,2); # Split the Message out

$szMessage =~ s/ - \"//i; # Filter out the " - ""
 chop($szMessage); # Remove the last "

#Print out all splitted fields
 print "\n\nSplitted Message\n";
 print "================\n\n";
 print "Severity Code: $szSeverityCode \n";
 print "Date: $szDate \n";
 print "Server: $szServer \n";
 print "NT Event Source: $szNTEventSource \n";
 print "EventID: $szEventID \n";
 print "Actual Message: $szMessage \n";
}

HomeProduct InfoGeneral InformationMonitorWare ProductsEdition ComparisonOrder and PricingUpgrade Insurance InfoNews ReleasesVersion HistoryProduct TourScreenshotsDownloadReference libraryGeneral InformationStep-by-step guidesAllInstallation and ConfigurationServices relatedActions relatedCentral MonitoringCommon UsesCentralized monitoringSecurity ReferenceHelpSupportManualFAQAllGeneral questionsInstallation and updatesEventReporter 6.x specificArticlesSeminars OnlineAllGeneralEventReporter relatedOrder & pricingOrder nowEditionsPricing InformationUpgrade Insurance InfoLocal ResellerContact UsSearch

Printer Version Send this page to a friend