Nagios Support Forum

I receive an Event Log from Windows with a HostName in message field like "NBADM01" or "NBUSR02".

I'm trying to create a row with a "terms" table in order to count the total of HostName and fill in a bar-like graph.

If I put "message" in field I can view a bar with the right number but all in one bar named "missing field".

It seems I cannot filter the message field. I can filter all other fields.

Why???

Thank you in advance.
Graziano.

Ensure that the message field is being correctly extracted and parsed. Sometimes, if the field is not properly extracted, it might appear as missing field.

THe key here is definitely going to be to ensure that the message field is parsed correctly. In a table you can click on a log entry and it will bring up all the fields that Nagios Log Server has parsed so you can verify it.