ZenEvents.SyslogProcessing.SyslogProcessor

Package ZenEvents :: Module SyslogProcessing :: Class SyslogProcessor

[show private | hide private]

Type SyslogProcessor

object --+
         |
        SyslogProcessor

Method Summary
	`__init__(self, zem, minpriority, parsehost)`
	`buildEventClassKey(self, evt)` Build the key used to find an events dictionary record.
	`defaultSeverityMap(self, pri)` Default mapping from syslog priority to severity.
	`parseHEADER(self, evt, msg)` Parse RFC-3164 HEADER part of syslog message.
	`parsePRI(self, evt, msg)` Parse RFC-3164 PRI part of syslog message to get facility and priority.
	`parseTag(self, evt, msg)` Parse the RFC-3164 tag of the syslog message using the regex defined at the top of this module.
	`process(self, msg, ipaddr, host, rtime)`
Inherited from `object`: `__delattr__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__str__`

Method Details

buildEventClassKey(self, evt)

Build the key used to find an events dictionary record. If eventClass is defined it is used. For NT events "Source_Evid" is used. For other syslog events we use the summary of the event to perform a full text or'ed search.

defaultSeverityMap(self, pri)

Default mapping from syslog priority to severity.

parseHEADER(self, evt, msg)

Parse RFC-3164 HEADER part of syslog message. TIMESTAMP format is: MMM HH:MM:SS and host is next token without the characters '[' or ':'.

parsePRI(self, evt, msg)

Parse RFC-3164 PRI part of syslog message to get facility and priority.

parseTag(self, evt, msg)

Parse the RFC-3164 tag of the syslog message using the regex defined at the top of this module.

Generated by Epydoc 2.1 on Thu Aug 16 09:55:08 2007

http://epydoc.sf.net