Package ZenEvents :: Module SyslogProcessing :: Class SyslogProcessor
[show private | hide private]
[frames | no frames]

Type SyslogProcessor

object --+
         |
        SyslogProcessor


Method Summary
  __init__(self, zem, minpriority, parsehost)
  buildEventClassKey(self, evt)
Build the key used to find an events dictionary record.
  defaultSeverityMap(self, pri)
Default mapping from syslog priority to severity.
  parseHEADER(self, evt, msg)
Parse RFC-3164 HEADER part of syslog message.
  parsePRI(self, evt, msg)
Parse RFC-3164 PRI part of syslog message to get facility and priority.
  parseTag(self, evt, msg)
Parse the RFC-3164 tag of the syslog message using the regex defined at the top of this module.
  process(self, msg, ipaddr, host, rtime)
Inherited from object: __delattr__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __str__
Inherited from SRE_Pattern: notHostSearch, timeParse

Method Details

buildEventClassKey(self, evt)

Build the key used to find an events dictionary record. If eventClass is defined it is used. For NT events "Source_Evid" is used. For other syslog events we use the summary of the event to perform a full text or'ed search.

defaultSeverityMap(self, pri)

Default mapping from syslog priority to severity.

parseHEADER(self, evt, msg)

Parse RFC-3164 HEADER part of syslog message. TIMESTAMP format is: MMM HH:MM:SS and host is next token without the characters '[' or ':'.

parsePRI(self, evt, msg)

Parse RFC-3164 PRI part of syslog message to get facility and priority.

parseTag(self, evt, msg)

Parse the RFC-3164 tag of the syslog message using the regex defined at the top of this module.

Generated by Epydoc 2.1 on Thu Aug 16 09:55:08 2007 http://epydoc.sf.net