Nagios Support Forum

Hi all

I'm trying to parse syslog messages that slightly deviate from the RFC3164 standard. I cannot control the message format at this source.
example message: There are two unexpected whitespaces, the first just before May and one just after May, which is probably why the standard syslog parser throws the
_grokparsefailure_sysloginput
error on each message.

How can I modify this syslog parser to match my messages? If I could change the date format to " %b %d %H:%M:%S" (adding the whitespaces) this could already be enough but I cant figure out how to do this. I would rather not re-write a grok filter but still use the syslog one.

Thanks

I am gradually adding hosts and services to the configuration. Everything seems to work fine, except the "Problems" link on the left-hand side menu on the main web page.

I'm gradually populating the setup with hosts and services. Everything appears to be in working order, with the exception of the "Problems" link on the main web page's left-hand side menu.
doodle baseball

Copy the existing syslog input and modify it.
As I recall, you'll need to change the port for the forwarder and the input if other forwarders use the default syslog input.