TextLog Receiver

Definition

Protocol

Text File

Description

Read lines from the end of FileName and set application name to Application.

Comments

Event Field	Contents
ev:host	ECS hostname
ev:app	Application
ev:log	FileName
ev:protocol	Text Log

If FileName is missing, blank or invalid, disable the receiver.
If Application is missing or blank, set it to "Text Log".

Only reads events added to the log while the ECS process is running, meaning that any pre-existing events are ignored.

One event is generated for each new complete line in the text log. The ev:msg field contains this line.

The ECS must have read access to FileName.

Special XML characters are translated according to the XML character translation table.

Example

<source objectId="TextLogRdr1" type="TextLogReader" stdout="FS.DemoAlive">
	<parameter type="FileName">D://orion/textLog2.txt</parameter>
	<parameter type="Application">Text File Reader</parameter>
</source>

Event Mapping

Incoming line from end of Web Server Log file:

{
	This new line with </event> inside has just arrived in the end of log.
}

Resulting XML

<event xmlns:ev="http://www.eventgnosis.com/">
	<ev:host>filipov</ev:host>
	<ev:app> ECS </ev:app>
	<ev:log>C:\Program Files\EventGnosis\NonDefaultFromLogFile.txt</ev:log>
	<ev:protocol>Text Log</ev:protocol>
	<ev:msg> This new line with &lt;/event&gt; inside has just arrived in the end of log.</ev:msg>
</event>