All Apps and Add-ons

IOS-XR syslog events not matching regex to transform

jgcsco
Path Finder

I have following syslog events from same IOS XR device:

May 22 01:01:01 10.10.0.1 1618: 5502-1.lab.com RP/0/RP0/CPU0:2018 May 22 01:09:29.318 UTC: isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to mrstn-5501-3.cisco.com (HundredGigE0/0/0/3) (L2) Up, New adjacency
May 22 01:01:01 10.10.0.1 1614: 5502-1.lab.com LC/0/0/CPU0:2018 May 22 01:09:29.303 UTC: ifmgr[178]: %PKT_INFRA-LINK-3-UPDOWN : Interface HundredGigE0/0/0/3, changed state to Up

The above two are transformed properly. However the following one is not:

May 23 01:52:09 10.10.0.1 4566: 5502-1.lab.com 0/RP0/ADMIN0:2018 May 23 02:00:44.582 UTC: envmon[2269]: %PKT_INFRA-FM-2-FAULT_CRITICAL : ALARM_CRITICAL :temperature alarm :DECLARE :0/RP0: CPU-Inlet has raised a temperature alarm with value of -19

I have tried to change the regex in transforms.conf based on the recommendation in the posted link text, but could not get it work.

I am running Cisco Networks Add-on 2.5.4.

Any suggestions?

Thanks

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!