What is the log file format for generating reports with Monilog for MonitorWare Agent, WinSyslog and EventReporter?
Created 2006-06-20 by Timm Herget
I am using MonitorWare Agent 4.x / EventReporter 8.x / WinSyslog 7.x
What are the settings that I would have to make such that the log file is generated in a format that is acceptable to Monilog?
There are a few things that have to be set in order to generate a log file that would be read by Monilog for Reporting purposes. Your settings would vary over:
- 1. SETP Protocol
- 2. Syslog Protocol
1. Report Settings for SETP
At Sender’s Side:
1.1. Event Log Monitor Setting
Use the default format of the EventLog Monitor’s. Your settings should be like this:
Figure 1: Event Log Monitor Service Settings
1.2. Forward Via SETP Settings
Use the default formtat of the “Forward via SETP” actions. In this example we assume that all messages should be forward via SETP to the central SETP Server at 172.16.100.8. Please replace this value per your environment.
Figure 2: Forward Via SETP Action Settings
At Reciever’s Side:
1.3. SETP Listener Settings
Use the default format of the SETP Server. Your settings should be like this:
Figure 3: SETP Listener Service Settings
1.4. Write to File Action Settings
In Write to File Action, Choose “Custom” from the “File Format” combo box. You would see that the “Custom Line Format” has been enabled. From the “Insert” menu entry select “Replace with Monilog Format“. Your settings should be like this:
Figure 4: Write to File Action Settings
With the above mentioned settings, Monilog will successfully generate the report on the log file that has been generated.
2. Report Settings for Syslog
At Sender’s Side:
2.1. Forward via Syslog Settings
In Forward via Syslog Action, you would see a “Message Format” option. From the “Insert” menu entry select “Replace with Monilog Format“. In this example we assume that all messages should be forward via Syslog to the central Syslog Server at 192.168.141.10. Please replace this value per your environment. Please Note: It is very important that you uncheck the “Add Syslog Source when forwarding to other Syslog servers” Option. Your settings should be like this:
Figure 5: Forward via Syslog Action Settings
At Reciever’s Side:
2.2. Syslog Listener Settings
Please note that the “Enable RFC 3164 Parsing” should be checked. Your settings should be like this:
Figure 6: Syslog Listener Settings
2.3. Write to File Action
Simply add a write to the file action and bind this RuleSet to the service. Do not chnage the default settings of this action!
Figure 7: Write to File Action Settings
With the above mentioned settings, Monilog will successfully generate the report on the log file that has been generated.