What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Split Syslog Structured Data Into Separate Columns

Votes:

0

I'm aware to query the syslog sensor by structured data fields (SD-ID,param-name,param-value) as shown at https://www.paessler.com/blog/introducing-the-new-high-performance-syslog-and-snmp-trap-receiver-sensors , but is it possible to display this data with a column for each parameter?

column sensor-display syslog syslog-sensor

Created on Sep 15, 2017 3:46:57 PM



3 Replies

Votes:

0

Hello Max,

Thank you very much for your knowledge base post.

Would you please further clarify the situation, because it will allow me to better understand the situation you described.
By default, the Syslog Receiver sensor is a passive sensor that only shows the values provided by the monitoring device. Please refer to my attached screenshot for further information on the by default provided columns of that sensor.

Syslog Receiver
Click to enlarge

If you have further questions, please elaborate what you mean by SD-ID, param-name and param-value.

Best regards,
Sebastian

Created on Sep 18, 2017 1:01:27 PM by Sebastian Kniege [Paessler Support]



Votes:

0

By SD-ID, param-name, and param-value, I refer to the format of syslog structured-data items ( https://tools.ietf.org/html/rfc5424 )

My question was whether it was possible to have PRTG display each structured-data item in its own column. (For example, there might be a column for 'user' and another for 'isDebugBuild'.)

Since asking the question, I've discovered PRTG has good support for querying/searching over structured-data values, but it could still be useful to display them column-by-column.

I believe my question mirrors this one: https://kb.paessler.com/en/topic/70204-syslog-reciever-sensor-message-format

Also, I'm unable to log in with my old account - I am told the account is inactive, and am unable to reset the password, or to request an activation email to be resent. This is why I'm using a new account.

Created on Dec 22, 2017 10:29:18 AM



Votes:

0

Hi there,

I am afraid that this will not be possible or implemented as the table of the Syslog Sensor is already rather large. More columns would mean less information on the first view as every column would be tiny.

Best regards.

Created on Dec 25, 2017 10:00:18 AM by Dariusz Gorka [Paessler Support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.