Difference between revisions of "UM:Log Monitoring"

62 bytes added ,  14:07, 2 April 2012
m
Line 154: Line 154:


This tag has no effect for text log files, and can be used as a synonym for <nowiki><facility></nowiki> tag for syslog monitoring.
This tag has no effect for text log files, and can be used as a synonym for <nowiki><facility></nowiki> tag for syslog monitoring.


=== <nowiki><source></nowiki> Tag ===
=== <nowiki><source></nowiki> Tag ===
Tag <nowiki><source></nowiki> can be used to filter records from Windows Event Log by event source. You can specify exact event source name or pattern with * and ? metacharacters.
Tag <nowiki><source></nowiki> can be used to filter records from Windows Event Log by event source. You can specify exact event source name or pattern with * and ? metacharacters.


Some examples:
Some examples:


<nowiki><source>Tcpip</source></nowiki>
<syntaxhighlight lang="xml">
<source>Tcpip</source>
</syntaxhighlight>


will match records with event source "Tcpip" (case-insensetive), and
will match records with event source "Tcpip" (case-insensetive), and


<nowiki><source>X*</source></nowiki>
<syntaxhighlight lang="xml">
<source>X*</source>
</syntaxhighlight>


will match records with event source started from letter "X".
will match records with event source started from letter "X".


This tag has no effect for text log files, and can be used as a synonim for <nowiki><tag></nowiki> tag for syslog monitoring.
This tag has no effect for text log files, and can be used as a synonym for <nowiki><tag></nowiki> tag for syslog monitoring.


=== <level> Tag ===
=== <level> Tag ===
683

edits