AutoPatrol, Bureaucrats, Administrators
683
edits
Difference between revisions of "UM:Log Monitoring"
Jump to navigation
Jump to search
m
→Global Parser Options
| Line 51: | Line 51: | ||
Entire <nowiki><macros></nowiki> section can be omited, and inside <nowiki><rule></nowiki> tag only <nowiki><match></nowiki> is mandatory. | Entire <nowiki><macros></nowiki> section can be omited, and inside <nowiki><rule></nowiki> tag only <nowiki><match></nowiki> is mandatory. | ||
== Global Parser Options == | == Global Parser Options == | ||
In the <nowiki><parser></nowiki> tag you can specify the following options: | In the <nowiki><parser></nowiki> tag you can specify the following options: | ||
{| | {| class="wikitable" | ||
| | |- | ||
! Option !! Description !! Default value | |||
|- | |- | ||
| processAll || If this option set to 1, parser will always pass log record through all rules. If this option set to 0, processing will stop after first match. || 0 | |||
| | |||
| | |||
|- | |- | ||
| trace || Trace level. || 0 | |||
| | |} | ||
| | |||
== <file> Tag == | == <file> Tag == | ||
<nowiki>In the <file> tag you should specify log file to apply this parser to. To specify Windows Event Log, prepend it's name with asterisk (*), for example </nowiki>'''<nowiki>*System</nowiki>'''. | <nowiki>In the <file> tag you should specify log file to apply this parser to. To specify Windows Event Log, prepend it's name with asterisk (*), for example </nowiki>'''<nowiki>*System</nowiki>'''. | ||