Add Field Resolvers in Logging Profile elements
For converting syslog values, add a field resolver for either multiple values or for date and time.
For more details about the product and how to configure features, click Help or press F1.
Steps
- In the Logging Profile, click the Field Resolvers branch in the left pane.
- Drag and drop a Field Resolver to the Header field or to the Patterns pane.
- If the Field Resolver you want is not listed, right-click a Field Resolver, then select . Define the Field Resolver for either multiple values or for date and time.
Field Resolver Properties dialog box
Use this dialog box to define the properties for a Field Resolver.
Option | Definition |
---|---|
Name | The name of the element. |
Field Type | Select from the following:
|
Time Field | (When Field Type is Date) Shows the selected Time Field. You can select the log field for which you want to define a time stamp. Click Select to select an element. |
Time Format |
(When Field Type is Date) Enter the format that the third-party device uses for the time stamp. Note: Type the format according to Java standards. For syntax, see https://docs.oracle.com/javase/1.5.0/docs/api/java/text/SimpleDateFormat.html.
|
Fields | (When Field Type is Multi-valued) Shows the selected SMC log fields. The incoming syslog data is inserted into the log fields that you select. Click Add to add an element to the list, or Remove to remove the selected element. |
Value | Enter a value for the field. The other columns in the table come from the fields that you add to the Fields list. Click Add to add a row to the table, or Remove to remove the selected row. |