RSA Admin

File Reader

Discussion created by RSA Admin Employee on Jun 24, 2008
Latest reply on Jun 25, 2008 by RSA Admin

Is there a bug with the File reader ? When we specify 2 delimiters in the field delimiter option and it chops the first character of the message ID.

CI 06/05/2008 12:00:10 AM (SG) \BUFFY.$ZZLAN auth.login.success,\BUFFY,SOC.PROD,PROD.NET,\BUFFY.$ZTCP0,Valid,Jun 05 2008, 01:00:10

 

For eg - In our case we specified space and comma as the field delimiters, and the message id location to be 7. When displayed in the event viewer , it is displayed like this -

 

%Tandem-4-uth.login.success: CI 06/05/2008 12:00:10 AM (SG) \BUFFY.$ZZLAN auth.login.success,\BUFFY,SOC.PROD,PROD.NET,\BUFFY.$ZTCP0,Valid,Jun 05 2008, 01:00:10

 

This happens whenever we give two delimiters in the field delimiter option.

Outcomes