ECS TCP Event Sender

Protocol

TCP

Description

Send EventGnosis ECS events to Host on Port.

Comments

Event Field Defaults (if not specified)

Event Field	Contents
ev:host	hostname of sender
ev:app	ECS
ev:log	sender object name:port

Special XML characters are translated according to the XML character translation table.

Example

<destination objectId="TcpSender" type=" EmsTcpEventSender" stdout="FS.DemoAlive">
	<parameter type="Host">errLogHost</parameter>
	<parameter type="Port">21033</parameter>
</destination>

Event Mapping

Incoming ECS event XML:

<event xmlns:ev="http://www.eventgnosis.com/">
	<ev:host>elmo</ev:host>
	<ev:app>Win Security Log</ev:app>
	<ev:log>Windows Log</ev:log>
	<protocol>Windows</protocol>
	<ev:msg>The SNMP service is going down.</ev:msg>
</event>

Resulting write to host/port:

{
	+++Filip
	The SNMP service is going down
}