AnsweredAssumed Answered

Parser Issue - Can I use wildcard for "messageid"?

Question asked by Omar Garcia Gilio on Feb 7, 2017
Latest reply on Feb 7, 2017 by Joe Gumke

Hello,

I have a trouble with a definition of "messageid" on a log. I have this kind of log:

 

   %APPX-4: LogSubscripcin|Dar de baja|2016-08-24 12:23:54|pepe

 

I defined the header as:

     <HEADER
      id1="0001"
      id2="0001"
      content="%APPX-4: &lt;messageid&gt;|&lt;!payload&gt;"/>

and the MESSAGE as:

<MESSAGE
level="6"
parse="1"
parsedefvalue="1"
tableid="92"
id1="LogSubscripción:01"
id2="LogSubscripción"
eventcategory="1605000000"
content="&lt;trans_id&gt;|&lt;eventtime&gt;|&lt;username&gt;"/>

So, my trouble is with the string "LogSubscripción" as message id, because the 'ó' (the original log file came this way) after the log file is transferred turn to ''. It's possible use wildcards like: id1="LogSubscripci%n:01"?

 

I really appreciate any help.

Outcomes