NetXMS Support Forum

Windows event parser suddenly stopped parsing my rules. I even tried to wipe all rules and just create the most simple rule (below), but no NetXMS Events are created. I still see the log entries in Windows Event Log (in NetXMS).

What might have happened, or how can I debug this to find a resolution?

Using NetXMS 4.2.395.

Best regards


<parser name="ParserNEW">
  <macros/>
  <rules>
      <rule name="">
        <match repeatInterval="0" reset="false">.*</match>
        <event>TEST_EVENT</event>
        <agentAction action=""></agentAction>
      </rule>
  </rules>
</parser>


It's a bug introduced in 4.2. It affects syslog and windows event log processing in fields "source" and "tag".

Bug is fixed, will be in next patch release. 

Meanwhile you can put * character in source, it should work that way.

Quote from: Filipp Sudanov on November 01, 2022, 05:42:37 PMMeanwhile you can put * character in source, it should work that way.

Yes, it did work. Thank you.