Message content or counters
This option allows you to choose a variable or counter inside message text. The variable is then replaced with the current value before the message is sent. For example, $Message.MsgText is replaced with the text of the current syslog message.
To add a variable:
- From the Kiwi Syslog NG navigation bar, choose Setup > Rules.
- Locate an existing rule. If the rule does not exist, add a rule and start the New Rule wizard.
- If you are adding content or counters to the message of to an existing rule, select the rule and click Edit. If you are creating a new rule, navigate to the Actions step of the New Rule wizard.
- Click Add Action. Define the action name in the provided field.
-
In the Action drop down, select any rule action that includes message text.
Current rule actions with message text include E-mail message and Send syslog message.
- Position your cursor where you want to insert the variable in the message text box.
- Click
and select a variable.
The following variables are available.
All of the message
|
Parameter |
|
|
Explanation |
The entire message as it appears on the display, including the time, date, priority and message text. Each field is space delimited. |
|
Example |
|
Date
|
Parameter |
|
|
Explanation |
The date the message arrived in the format YYYY-MM-DD. |
|
Example |
|
Time
|
Parameter |
|
|
Explanation |
The time the message arrived in the format HH:MM:SS. |
|
Example |
|
Facility
|
Parameter |
|
|
Explanation |
The facility of the message in text format. |
|
Example |
|
Level
|
Parameter |
|
|
Explanation |
The level of the message in text format. |
|
Example |
|
Host address of sender
|
Parameter |
|
|
Explanation |
The host IP address of the sending device. |
|
Example |
|
The message text
|
Parameter |
|
|
Explanation |
The message text part of the syslog message. |
|
Example |
|