Search 85,959 posts and 653 resources contributed by 43,602 members or post a topic.

Already Joined? Sign in
New resources. Advanced syslog parser.

Page 8 of 8 (119 items) « First ... < Previous 4 5 6 7 8 | RSS

rated by 0 users
Answered (Not Verified) This post has 0 verified answers | 118 Replies | 29 Followers | 383,561 Views


120 Posts
Points 9,114
Gob posted on Tue, Nov 27 2007 3:45 AM
rated by 0 users

 

New! v.1.01
Advansed Syslog search, Syslog Parser like Cisco Works, Advanced Syslog Summary and Syslog Counts

http://thwack.com/files/folders/orion_custom_views__orion_nodeinterface_views/entry30734.aspx

Comments?

All Replies


4 Posts
Points 14
thorpe replied on Fri, Feb 6 2009 1:05 AM
rated by 0 users

I have Orion version 9 and was trying to get this to work but having some problems. Does anyone have some detailed instructions on how to install?

on my page I get errors:

SQL Open Error: Invalid column name 'access'. 

And all the colums say nothing, msg, summ and 0

Thanks for any help

Robert

  • | Post Points: 3

120 Posts
Points 9,114
Answered (Not Verified) Gob replied on Fri, Feb 6 2009 6:31 AM
rated by 0 users
Suggested by Elisabeth Zakes

thorpe:

my page I get errors:
SQL Open Error: Invalid column name 'access'.

 Just create empty Access table.

Run Custom Property Editor. Then press Nodes,Add,Build a Custom Property from scratch, Add to Nodes, Name - Access, Type - text, length - 10
You can fill it later. SSH and Telnet url is very nice and useful feature!

 

  • Post Points: 5

18 Posts
Points 54
goldberg replied on Fri, Feb 6 2009 11:44 AM
rated by 0 users

Sweet, worked Great!  Thank you very much!!!

NPM 9.5 SP5 - APM 3.1 - NTA 3.6 - IPAM 1.6 - NCM 5.5.2

  • | Post Points: 1

4 Posts
Points 14
thorpe replied on Tue, Feb 10 2009 11:25 PM
rated by 0 users

 

Well when I try and build the page and when I look at it this is what I am getting

 

 

  • | Post Points: 5

120 Posts
Points 9,114
Gob replied on Wed, Feb 11 2009 7:55 AM
rated by 0 users

Execute this query via ReportWriter

select syslogseverity, count(*)
from syslog
where (SysLog.DateTime >dateadd(month,-1,getdate()))
group by syslogseverity order by syslogseverity desc

Any results?

  • | Post Points: 3

242 Posts
Points 1,192
neilmborilla replied on Thu, Apr 9 2009 2:41 PM
rated by 0 users

Thanks for a freat piece GOB,

Is there a way to add or change hostname target to CAPTION instead of IP ADDRESS?

 

oi Pinoy

  • | Post Points: 3

120 Posts
Points 9,114
Gob replied on Thu, Apr 9 2009 3:41 PM
rated by 0 users

I cannot verify it right now. I have a day off. But you can try to fix it. Just find old value and replace it with new.

Open 25-AdvSyslogParser.Resource in any text editor

Find and replace the following (top - old, bottom - new)

 

then Response.Write SSQQLL.GetProperty("Caption")
then Response.Write SSQQLL.GetProperty("hostname")


SSQQLL.SQL="select caption,access,NodeID,IP, "
SSQQLL.SQL="select caption,access,NodeID,IP,hostname, "



SSQQLL.SQL=SSQQLL.SQL & "group by caption,access,NodeID,IP, syslogseverity "
SSQQLL.SQL=SSQQLL.SQL & "group by caption,access,NodeID,IP,hostname, syslogseverity "

  • | Post Points: 1

49 Posts
Points 110
dclick replied on Tue, May 5 2009 2:56 PM
rated by 0 users

thorpe:

 

Well when I try and build the page and when I look at it this is what I am getting

 

 

I am also getting this.  I ran this query:



select syslogseverity, count(*) 
from syslog 
where (SysLog.DateTime >dateadd(month,-1,getdate()))
group by syslogseverity order by syslogseverity desc

and do get data returned.   Could it be the way i have the view setup?  I created a custom menu item, but used the link shown in the "Preview" window when i created the view space.

 

Short of this, EVERYTHING worked perfectly w/o a hitch, even the charts. 

 

Thanks for an awsome addon!

Don Click

Telelcommunicaitons Manager

Denton County Information Services

Denton, Texas

----

Orion NPM 9.5.1, APM 3.1, NTA 3.5

  • | Post Points: 3

120 Posts
Points 9,114
Gob replied on Tue, May 5 2009 9:56 PM
rated by 0 users

This is very strange. Try to change the Time period to month and type of query to "syslog only".  Just click on Edit button.

  • | Post Points: 8

83 Posts
Points 201
smcdonald replied on Sun, May 31 2009 9:13 PM

Hi Gob,
Now that v9.5 of Orion is out - are you planning to upgrade your syslog parser to support ASPX?
I just upgraded and I'm already missing your excellent tool!

The solarwinds guys really should integrate this tool into Orion and pay you for your time(!)

Thanks so much! 

  • | Post Points: 3

238 Posts
Points 1,100
SolarWinds Employee
Karlo.Zatylny replied on Sun, May 31 2009 9:39 PM
rated by 0 users

Hi,

We did integrate the Advanced Syslog Parser into ASPX.  You should see them as available resources in your 9.5 installation.  Please let me know if you have any issues with finding them or using them. 

Thanks

Karlo Zatylny
Orion Development Lead

  • | Post Points: 5

83 Posts
Points 201
smcdonald replied on Mon, Jun 1 2009 2:13 AM
rated by 0 users

Wow!
Awesome - I didn't realise it was now included - I just saw it vanish from all my page views...
Thats great!!
 
Has the behaviour changed at all?  I see a few devices showing syslog msgs but only showing IPs - this seems to be devices that are sending syslog but are not in Orion.  I dont remember seeing these previously in this view so I'm wondering if the filtering has changed?  If not I guess it's just down to a quiet day for my usual devices...

Thanks guys - awesome addition!

  • | Post Points: 1

44 Posts
Points 131
Dal replied on Tue, Jun 2 2009 5:32 AM
rated by 0 users

I cannot find it, so please do tell how to :)

 

Thanks.

  • | Post Points: 3

2,601 Posts
Points 11,172
Moderator
SolarWinds Employee
bshopp replied on Tue, Jun 2 2009 8:08 AM
rated by 0 users

We have not added them by default you need to add them to the pages you desire them to be on.  In the web console, go to Admin -> Manage Views, select a view such a node details and edit and then click add to one of the columns, under Syslog there are three Advanced Syslog options you can add

Brandon Shopp - Product Manager Orion NPM, Network Atlas and LANSurveyor

  • | Post Points: 1
Page 8 of 8 (119 items) « First ... < Previous 4 5 6 7 8 | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools

Learn More About SolarWinds Products