I have successfully configured Syslog Monitoring and I am receiving messages from all agent nodes.  How can I create alarms from the syslog monitoring message entries?

You need to create log parser definition in Configuration -> Syslog parser.

There could be several definitions, each is a filter that only reacts to particular conditions - syslog text, source, etc.
Each definition specifies an event that is triggered.
Then in Event Processing Policy you need to have a rules for these events. These rules can create alarms, terminate alarms, send notifications, etc.

Hi Filipp,
In the training materials I see references to disk_logger.  Is that incorporated into NetXMS or is it a 3rd party app?

Hi!

Which exactly training materials, were they prepared by Raden Solutions or some third party?
I suppose disk_logger is some 3-rd party app that can send syslog messages. Not sure if it's giving any benefits over netxms agent when monitoring a system.

It is referenced in the Syslog Basics video