Check_Log

[Mike Koponick]

I wanted to say thanks to all who responded to my question regarding
parsing syslog files.

 

Thanks!

 

But, I was wondering about check_log. It seems that it would work for my
environment. However I see that I have run into a snag of sorts.

 

I'm parsing out Cisco PIX logs, and was able to parse out "Deny" type
logs successfully. However, I'm only getting part of the syslog message.

 

Here is what I receive in MySQL:

 

(36)    Mar  3 14:22:11 secure-primary Mar 03 2006 14:59:44:

 

If I look at the Nagios log (External Commands) I also see the "chopped"
line, so it appears to be occurring during the parsing process.

 

Here is the syslog entry:

 

Mar  3 14:22:11 secure-primary Mar 03 2006 14:59:44: %PIX-4-106023: Deny
udp src inside:10.xxx.xxx.xxx/12346 dst EXTRANET:192.168.xx.xx/12345 by
access-group "inside"

 

It appears to be failing at the "%" on the syslog entry. 

 

Thanks in advance,

 

Mike

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060303/902495ba/attachment.html>