Search

Page tree
Skip to end of metadata
Go to start of metadata

In this section

Overview

SBC Edge (1000/2000) or VX can send logging messages to external syslog systems. Often, those systems prepend information to the log entries. Before the LX can parse the file, the file must be edited such that it is the correct format. In other words, the log file format must conform to that which was sent from the SBC Edge or VX.

Converting an External Log to an LX Readable Format

The LX application includes External Syslog Formatting functionality that allows it to remove any prepended information and also convert hexidecimal line breaks to Windows compatible line feeds.

The following is an example of a log file from an external log server with information prepended to the original SBC Edge syslog entry.

2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:116) - ProcessTimerExpiration: 2a1190 OptionsSession::ProcessTimerExpiration() called
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Session.cpp:737) - SelectLocalIP: Using IP [0.0.0.0]:5067 Media IP=[0.0.0.0]:0  0 - 1
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:310) - startTransaction: Options via from message is: 0.0.0.0:5067
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Transaction.cpp:556) - createClientTransaction: Transaction destination is svrlyncfe01.lacertetech.com [192.168.5.171]:5067
2011-10-11 15:00:02	Local0.Debug	lyncux2k01	[2011-10-11 14:59:11,050] com.net.ux.sip DEBUG (Transaction.cpp:89) - Transaction: Transaction 0x2fb7a8 ctor called req=OPTIONS [192.168.5.171]:5067

The following is an example original message sent by the SBC Edge:

[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:116) - ProcessTimerExpiration: 2a1190 OptionsSession::ProcessTimerExpiration() called
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Session.cpp:737) - SelectLocalIP: Using IP [0.0.0.0]:5067 Media IP=[0.0.0.0]:0  0 - 1
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (OptionsSession.cpp:310) - startTransaction: Options via from message is: 0.0.0.0:5067
[2011-10-11 14:59:11,049] com.net.ux.sip DEBUG (Transaction.cpp:556) - createClientTransaction: Transaction destination is svrlyncfe01.lacertetech.com [192.168.5.171]:5067
[2011-10-11 14:59:11,050] com.net.ux.sip DEBUG (Transaction.cpp:89) - Transaction: Transaction 0x2fb7a8 ctor called req=OPTIONS [192.168.5.171]:5067

External Syslog Formatting

Formatting information used to reformat external syslogs into an LX readable form is provided in the External Syslog Formatting section of the LX Settings dialog.

Figure : External Syslog Formatting

The External Syslog Formatting functionality allows you to do two things:

  • Remove groups of prepended text strings

  • Specify the line breaks added to the end of each entry when the syslog file is saved by the LX application.

Trimming Prepended Text

The Line Prefix Spkit Count field value specifies the number of strings terminated by a space character to remove from the beginning of each line.

In the example below, the Line Prefix Split Count is specified as 4 (default). The first four text strings are removed from each line in the log file.

Setting the Line Break Character

The RegexPattern - Line Breaks field accepts a Regular Expression that specifies, in hexadecimal, the character to add at the end of each line in the log file. The default is the Windows line feed character.

Opening an External Syslog File

Opening an external syslog file is a straightforward process. You can either drag-and-drop it on the LX application window or use the Open command (Ctrl+O) in the File menu.

When an external syslog file is opened LX converts the file to a SBC system log file format using the information provided in the Settings dialog. After the file is converted, the LX saves it to the same location as the source file using the file name LX_Converted_[date/time stamp].log.

 

 

  • No labels