TECHZEN Zenoss User Community ARCHIVE  

Incorrect Syslog parsing for Alcatel-Lucent routers (7750 SR)

Subject: Incorrect Syslog parsing for Alcatel-Lucent routers (7750 SR)
Author: [Not Specified]
Posted: 2016-10-20 09:57

Hi all,

I've noticed that Zenoss (4.2.4) does not parse Syslog messages coming from Alcatel routers correctly. I always get the virtual router or interface as the event key. When tracing or writing to flat file, I see the Syslog message having an identifier which can be used to correctly identify that type of Syslog messages.

I've seen Zenoss use that correctly on a Cisco firewall. But for some reason, it doesn't like Alcatel-Lucent format

I think it's probably a matter of adding the correct regex on /opt/zenoss/Products/ZenEvents/SyslogProcessing.py . Not sure about any regression, though...

Thank you,



Subject: Modifying the regexes in
Author: Jane Curry
Posted: 2016-10-25 06:19

Modifying the regexes in SyslogProcessing.py is the only way I know of - and I would also be very careful to preserve that edited file well outside of the Zenoss directory hierarchy as it may well got overwritten in any subsequent upgrade.

I guess the correct route is to do the mods, test it works and then supply your "fix" in a Zenoss JIRA ticket for inclusion in a lter update.

Cheers,

Jane

Email: jane.curry@skills-1st.co.uk    Web: https://www.skills-1st.co.uk



< Previous
(Resolved) Using Zenoss JSON API How Do I Pull a List of Device Classes?
  Next
Error upgrading to 5.1.7
>