Quantcast
Channel: THWACK: Message List - Kiwi Syslog
Viewing all articles
Browse latest Browse all 2141

Re: Kiwi Syslog + PFsense (parsing firewall log from 2 lines to 1 help)

$
0
0

Thanks Renatosilvaagio!

 

Eilz,

 

Let me know if this works for you. and if it doesn't...

 

I have a script functioning right now, but because we are waiting for the completion of a message and it's not always 2 lines long (sometimes 3 lines), the way I have it working, is that you won't get Message A+A1+A2 until Message B has been received and the script verifies that it's the beginning of a new message. This is fine if you're receiving several messages per minute, but if you receive a critical message and your device fails afterwards, that Critical message is just going to sit there waiting.

 

I've put in a time-out function of 120 seconds for this, but it's not a work around that I would really be satisfied with and it would have to rely on Keep-Alive messages to come in every 2 minutes just to verify if there is a PFsense message just sitting out there waiting to be processed. Definitely not an elegant solution, but it would work if there are no other options.


Viewing all articles
Browse latest Browse all 2141

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>