TextLog Receiver v3

Definition

Protocol

Text File

 

 

Description

Read lines from the beginning of FileName, if they do Not match String and set application name to Application.

 

 

Comments
Event Field Contents
ev:host hostname
ev:app %Application%
ev:log filename

If FileName is missing, blank or invalid, disable the receiver.

If String is missing, blank or invalid, all events will be passed through the
ECS (no matter what is the value of Not parameter).

If Application is missing or blank, set it to default one.

Reading starts from the beginning of the file, reads the entire file and waits for new lines.

One event is generated for each new complete either matching or Not matching line in the text log. The ev:msg field contains this line.

The ECS must have read access to FileName.

Special XML characters are translated according to the XML Character Translation Table.

 

Example

<source objectId="TextLogv3" stdout="FS.DemoAlive" type="TextLogReceiver-v3">
	<parameter type="FileName">in.txt</parameter>
	<parameter type="Not">Not</parameter>
	<parameter type="String">ECS</parameter>
	<parameter type="Application">TextLogv3</parameter>
</source>