Documentation forKiwi Syslog Server

Add an action to log to the NT event log

You can add an action to log messages to the NT application event log.

When you view the NT event log with the NT event log viewer, the log type is set to show System events by default. To show Application events, select the Application item in the Log menu of the NT Event viewer.

  1. From the Kiwi Syslog NG navigation bar, choose Setup > Rules.
  2. Locate an existing rule. If the rule does not exist, add a rule and start the New Rule wizard.
  3. If you are adding an action to an existing rule, select the rule and click Edit. If you are creating a new rule, navigate to the Actions step of the New Rule wizard.
  4. Click Add Action. Define the action name in the provided field.
  5. In the Action drop down, select Log to NT event log.
  6. Specify the following options.

    Event log message type Logging level to be used for messages logged to the NT event log by this action.
    Insertion string options

    How messages are inserted into the Event Log:

    • Single insertion string

      %1 is replaced with: Date – Tab – Time – Priority – Tab – Hostname – Tab – Message

    • 5 Tab delimited insertion strings

      %1 Tab %2 Tab %3 Tab %4 Tab %5

      • %1 = Date
      • %2 = Time
      • %3 = Priority
      • %4 = Hostname
      • %5 = Message
    • 5 Space delimited insertion strings

      %1 Space %2 Space %3 Space %4 Space %5

      • %1 = Date
      • %2 = Time
      • %3 = Priority
      • %4 = Hostname
      • %5 = Message
  7. If you are adding an action to an existing rule, click Apply. If you are creating an action in the New Rule wizard, click Add.