I have some crazy syslog messages coming in with a component and eventClassKey that are simply steadily increasing numbers. The only consistent thing is the event summary message. The events are being generated when a Cisco router log line wraps around to the next line. Zenoss interprets this as a new event and handles it kind of weird. Anyways, here is a sample of the events that I am seeing (yes, the last event example actually has a completely blank summary message). Any help would be appreciated.
Thanks,
Ryan Matte
Nova Networks
_____________________________________________________________
eventClass /Unknown
eventKey
summary connection id=16, sequence number=154389
message
connection id=16, sequence number=154389
severity Warning (3)
eventState New (0)
eventClassKey 288418
eventGroup syslog
stateChange 2009/04/28 10:48:49.000
firstTime 2009/04/28 10:48:46.000
lastTime 2009/04/28 10:48:46.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco
_____________________________________________________________
eventClass /Unknown
eventKey
summary connection id=35, sequence number=96314
message
connection id=35, sequence number=96314
severity Warning (3)
eventState New (0)
eventClassKey 288414
eventGroup syslog
stateChange 2009/04/28 10:47:46.000
firstTime 2009/04/28 10:47:45.000
lastTime 2009/04/28 10:47:45.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco
____________________________________________________________
eventClass /Unknown
eventKey
summary
message
severity Warning (3)
eventState New (0)
eventClassKey 288404
eventGroup syslog
stateChange 2009/04/28 10:42:36.000
firstTime 2009/04/28 10:42:36.000
lastTime 2009/04/28 10:42:36.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco
Thanks,
Ryan Matte
Nova Networks
_____________________________________________________________
eventClass /Unknown
eventKey
summary connection id=16, sequence number=154389
message
connection id=16, sequence number=154389
severity Warning (3)
eventState New (0)
eventClassKey 288418
eventGroup syslog
stateChange 2009/04/28 10:48:49.000
firstTime 2009/04/28 10:48:46.000
lastTime 2009/04/28 10:48:46.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco
_____________________________________________________________
eventClass /Unknown
eventKey
summary connection id=35, sequence number=96314
message
connection id=35, sequence number=96314
severity Warning (3)
eventState New (0)
eventClassKey 288414
eventGroup syslog
stateChange 2009/04/28 10:47:46.000
firstTime 2009/04/28 10:47:45.000
lastTime 2009/04/28 10:47:45.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco
____________________________________________________________
eventClass /Unknown
eventKey
summary
message
severity Warning (3)
eventState New (0)
eventClassKey 288404
eventGroup syslog
stateChange 2009/04/28 10:42:36.000
firstTime 2009/04/28 10:42:36.000
lastTime 2009/04/28 10:42:36.000
count 1
prodState Production (1000)
suppid
manager localhost
agent zensyslog
DeviceClass /Network/Router/Cisco