RSA Admin

iSeries syslog with PowerTech Interact

Discussion created by RSA Admin Employee on May 11, 2011
Latest reply on May 25, 2011 by RSA Admin

We have an iSeries that is running PowerTech's Interact syslog utility to provide logs.  We've pointed the output at enVision, but it's not parsing at this point. The iSeries shows up as "unknown", so we know the data is arriving. We have just installed enVision, so are still getting our feet wet.

 

We have another iSeries that we set up with FileReader and that data is coming in just fine.

 

I can see that the PowerTech syslog output has a couple of extra fields (that appear to define the version of Interact in use), and is using some PIPE delimiters and spaces instead of commas, etc...  Has anyone created a customization for Interact?

Outcomes