Report on Celerra CIFS Server as Windows Event NIC device

Discussion created by Juanma on Mar 24, 2011
Latest reply on May 2, 2011 by Juanma

Dear Colleagues,


I'm collecting logs from a CELERRA CIFS Server. The logs are collected successfully like a Windows Event NIC agentless device type but the XML parser don't undestand the logs and I can't report on them.

RSA Support said their developers website is down for two weeks and they can't answer me...


By looking at the raw events the only one difference is this:


Original Windows Event Nic events begins like %NICWIN-4-Security_560_Security 

Celerra events begins like %CELERRA-4-Security_560_Security

The rest of the event is exactly the same.


Do you have any idea on how to solve this?

I tried to add a few lines in wineventnic_msg.xml replacing NICWIN with CELERRA but it didn't work. 


Any idea?


Thank you,