Parser Issue - Can I use wildcard for "messageid"?

[OmarGarciaGilio]

Hello,

I have a trouble with a definition of "messageid" on a log. I have this kind of log:

   %APPX-4: LogSubscripci�n|Dar de baja|2016-08-24 12:23:54|pepe

I defined the header as:

     <HEADER
      id1="0001"
      id2="0001"
      content="%APPX-4: &lt;messageid&gt;|&lt;!payload&gt;"/>

and the MESSAGE as:

<MESSAGE
level="6"
parse="1"
parsedefvalue="1"
tableid="92"
id1="LogSubscripción:01"
id2="LogSubscripción"
eventcategory="1605000000"
content="&lt;trans_id&gt;|&lt;eventtime&gt;|&lt;username&gt;"/>

So, my trouble is with the string "LogSubscripción" as message id, because the 'ó' (the original log file came this way) after the log file is transferred turn to '�'. It's possible use wildcards like: id1="LogSubscripci%n:01"?

I really appreciate any help.

[JoeGumke]

Hi Omar,

you could try and creating your own message id like this:

     <HEADER
      id1="0001"
      id2="0001"

    messageid="*STRCAT('logsubcripcion')"
      content="%APPX-4: LogSubscripción|&lt;!payload&gt;"/>

and the MESSAGE as:

<MESSAGE
level="6"
parse="1"
parsedefvalue="1"
tableid="92"
id1="logsubcripcion"
id2="logsubcripcion"
eventcategory="1605000000"
content="&lt;trans_id&gt;|&lt;eventtime&gt;|&lt;username&gt;"/>