Search

Page tree
Skip to end of metadata
Go to start of metadata
Table of Contents

Overview

SBC 1000/2000 and VX can send logging messages to external syslog systems. Often, those systems prepend information to the log entries. Before the LX can parse the file, the file must be edited such that it is the correct format. In other words, the log file format must conform to that which was sent from the SBC 1000/2000 or VX.

 

Converting an External Log to an LX Readable Format

The LX application includes Syslog Formatting functionality that allows it to remove any prepended information and also convert hexidecimal line breaks to Windows compatible line feeds.

The following is an example of a logfile from an external log server with information prepended to the original SBC 1000/2000 syslog entry.

2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:116) - ProcessTimerExpiration: 2a1190 OptionsSession::ProcessTimerExpiration() called
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Session.cpp:737) - SelectLocalIP: Using IP [0.0.0.0]:5067 Media IP=[0.0.0.0]:0  0 - 1
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:310) - startTransaction: Options via from message is: 0.0.0.0:5067
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Transaction.cpp:556) - createClientTransaction: Transaction destination is svrlyncfe01.lacertetech.com [192.168.5.171]:5067
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,050] com.net.ux.sip DEBUG (Transaction.cpp:89) - Transaction: Transaction 0x2fb7a8 ctor called req=OPTIONS [192.168.5.171]:5067

The following is an example original message sent by the SBC 1000/2000 or VX:

[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:116) - ProcessTimerExpiration: 2a1190 OptionsSession::ProcessTimerExpiration() called
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Session.cpp:737) - SelectLocalIP: Using IP [0.0.0.0]:5067 Media IP=[0.0.0.0]:0  0 - 1
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:310) - startTransaction: Options via from message is: 0.0.0.0:5067
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Transaction.cpp:556) - createClientTransaction: Transaction destination is svrlyncfe01.lacertetech.com [192.168.5.171]:5067
[2011-10-11 14:59:11,050] com.net.ux.sip DEBUG (Transaction.cpp:89) - Transaction: Transaction 0x2fb7a8 ctor called req=OPTIONS [192.168.5.171]:5067

Syslog Formatting

Formatting information used to re-format external syslogs into an LX readable form is provided in the Syslog Formatting section of the LX Settings dialog.

The Syslog Formatting functionality allows you to do two things:

  • Remove groups of prepended text strings
  • Specify the line breaks added to the end of each entry when the syslog file is saved by the LX application.

Trimming Prepended Text

The Line Prefix Spkit Count: field value specifies the number of strings terminated by a space character to remove from the beginning of each line.

In the example below, the Line Prefix Split Count is specified as 4 (default). The first four text strings are removed from each line in the log file.

Setting the Line Break Character

The RegexPattern - Line Breaks: field accepts a Regular Expression that specifies, in hexadecimal, the character to add at the end of each line in the log file. The default is the Windows line feed character.

Opening an External Syslog File

Opening an external syslog file is a straightforward process, you can open it by dragging-and-dropping it on the LX application window, or by using the Open command (Crtl+O) in the File menu.

(warning) The ParseSyslog option on the Menu Bar must be ON or the file will not parsed.

When an external syslog file is opened LX converts the file to a SBC 1000/2000 or VX log file format using the information provided in the Settings dialog. After the file is converted, LX saves it to the same location as the source file. The file is named LX_Converted_[date/time stamp].log.

  • No labels