How to parse an EventReporter Syslog Message in Perl?

Simply use the sample script below. It shows you how to parse a single syslog message  generated by EventReporter. You can cut it from the textbox below.

#!/usr/bin/perl<br /> #####################################################################################################<br /> #Copyright (C) 2001 by Adiscon GmbH * http://www.adiscon.com<br /> #<br /> #This software can be distributed freely and used without cost, as long as this copyright notice<br /> #and disclaimer is retained unmodified. This script is free. Use it at your own risk. Adiscon will<br /> #not be responsible for any problem you might encounter.<br /> #####################################################################################################</p> <p>use CGI qw (:standard);</p> <p># Just the TestMessage<br /> $szEventReporterMessage = “EvntSLog: [ERR] Thu Feb 15 14:00:58 2001: FMSRV/Wins (4102) – \”The connection was aborted by the remote WINS. Remote WINS may not be configured to replicate with the server.\””;</p> <p>#Call the Splitterfunction<br /> &SplitEventLogMessage($szEventReporterMessage);</p> <p>#——————————————————-<br /> sub SplitEventLogMessage {<br /> my $szMessage = $_[0];<br /> my $szSeverityCode;<br /> my $szDate;<br /> my $szServer;<br /> my $szNTEventSource;<br /> my $szEventID;</p> <p> print “——————————\n”;<br /> print “DEBUG: $szMessage\n”;<br /> print “——————————\n”;<br /> $szMessage =~ s/EvntSLog: //gi; # Filter out the “EvntSLog: ”</p> <p> ($szSeverityCode,$szMessage) = split(/ /,$szMessage,2); # Split the Severity Code out<br /> ($szDate,$szMessage) = split(/: /,$szMessage,2); # Split the Date out<br /> ($szServer,$szMessage) = split(/\//,$szMessage,2); # Split the Server out<br /> ($szNTEventSource,$szMessage) = split(/ /,$szMessage,2); # Split the NTEventSource</p> <p> $szMessage =~ s/\(//i; # Filter out the “(”</p> <p> ($szEventID,$szMessage) = split(/\)/,$szMessage,2); # Split the Message out</p> <p> $szMessage =~ s/ – \”//i; # Filter out the ” – “”<br /> chop($szMessage); # Remove the last ”</p> <p> #Print out all splitted fields<br /> print “\n\nSplitted Message\n”;<br /> print “================\n\n”;<br /> print “Severity Code: $szSeverityCode \n”;<br /> print “Date: $szDate \n”;<br /> print “Server: $szServer \n”;<br /> print “NT Event Source: $szNTEventSource \n”;<br /> print “EventID: $szEventID \n”;<br /> print “Actual Message: $szMessage \n”;<br /> }