SBC 1000/2000 and VX can send logging messages to external syslog systems. Often, those systems prepend information to the log entries. Before the LX can parse the file, the file must be edited such that it is the correct format. In other words, the log file format must conform to that which was sent from the SBC 1000/2000 or VX.
Converting an External Log to an LX Readable Format
The LX application includes Syslog Formatting functionality that allows it to remove any prepended information and also convert hexidecimal line breaks to Windows compatible line feeds.
The following is an example of a logfile from an external log server with information prepended to the original SBC 1000/2000 syslog entry.
The following is an example original message sent by the SBC 1000/2000 or VX:
Formatting information used to re-format external syslogs into an LX readable form is provided in the Syslog Formatting section of the LX Settings dialog.
The Syslog Formatting functionality allows you to do two things:
- Remove groups of prepended text strings
- Specify the line breaks added to the end of each entry when the syslog file is saved by the LX application.
Trimming Prepended Text
The Line Prefix Spkit Count: field value specifies the number of strings terminated by a space character to remove from the beginning of each line.
In the example below, the Line Prefix Split Count is specified as 4 (default). The first four text strings are removed from each line in the log file.
Setting the Line Break Character
The RegexPattern - Line Breaks: field accepts a Regular Expression that specifies, in hexadecimal, the character to add at the end of each line in the log file. The default is the Windows line feed character.
Opening an External Syslog File
Opening an external syslog file is a straightforward process, you can open it by dragging-and-dropping it on the LX application window, or by using the Open command (Crtl+O) in the File menu.
The ParseSyslog option on the Menu Bar must be ON or the file will not parsed.
When an external syslog file is opened LX converts the file to a SBC 1000/2000 or VX log file format using the information provided in the Settings dialog. After the file is converted, LX saves it to the same location as the source file. The file is named LX_Converted_[date/time stamp].log.