tyler.durden/loganalyzer
1
0
Fork 0
mirror of https://github.com/rsyslog/loganalyzer.git synced 2025-09-26 11:19:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Minor fix to the new msg parser

Browse Source
This commit is contained in:
Andre Lorbach 2008-09-02 16:51:50 +02:00
parent 018ebaf3c3
commit c740edd9fe
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/classes/msgparsers/msgparser.eventlog.class.php
View File

@ -78,8 +78,11 @@ class MsgParser_eventlog extends MsgParser {
if ( $this->_MsgNormalize == 1 )
{
//Init tmp msg
$szTmpMsg = "";
// Create Field Array to prepend into msg! Reverse Order here
$myFields = array( SYSLOG_EVENT_CATEGORY, SYSLOG_EVENT_LOGTYPE, SYSLOG_EVENT_SOURCE, SYSLOG_EVENT_USER, SYSLOG_EVENT_ID );
$myFields = array( SYSLOG_MESSAGE, SYSLOG_EVENT_CATEGORY, SYSLOG_EVENT_LOGTYPE, SYSLOG_EVENT_SOURCE, SYSLOG_EVENT_USER, SYSLOG_EVENT_ID );
foreach ( $myFields as $myField )
{
@ -90,9 +93,12 @@ class MsgParser_eventlog extends MsgParser {
$szFieldName = $fields[$myField]['FieldCaptionID'];
// Append Field into msg
$arrArguments[SYSLOG_MESSAGE] = $szFieldName . "='" . $arrArguments[$myField] . "' " . $arrArguments[SYSLOG_MESSAGE];
$szTmpMsg = $szFieldName . ": '" . $arrArguments[$myField] . "'\n" . $szTmpMsg;
}
// copy finished MSG back!
$arrArguments[SYSLOG_MESSAGE] = $szTmpMsg;
}
}
else