Syslog Blade

[Juan_Concepcion]

So I can follow an incoming syslog message all the way into SmartEvent.  What I cannot do however is create a report filtering specifically for syslog because the blade does not show up for selection, consequently it does not show up in log view either when trying to select a specific blade for filtering on??

Has anyone encountered/found a solution for this??

--Juan

[_Val_]

There is no syslog blade. Yet, you should be able to filter by other fields

[Juan_Concepcion]

This is screenshot from the log entries that come into my R80.10 Manager and SmartEvent server - my wireless AP is forwarding syslog messages to them.  I have tried filtering on origin, product family and last resort was blade but it cannot be selected in the reporting.

--Juan

[_Val_]

Gotcha. Looks like an oversight to me. Would be a good RFE

[PhoneBoy]

Does seem like an oversight.

Tomer Sole‌ can you help confirm?

[Tomer_Sole]

I asked for the better experts to answer on this one. 

[Dan_Zada]

Filtering on blade is supported, maybe the syslog blade is not listed in the picker.

In that case, you can use a custom filter:

Product:Syslog

[Juan_Concepcion]

Tried that and didn't work, set the filter and didn't get any results.

[Dan_Zada]

Try "product:Syslog"  

[Juan_Concepcion]

Given that it's not showing up as a filtering option in the report do I need to create a custom event for it also?  Again I tried to go in and do this but it does not show up as a product available to filter on for an event.

The problem as I see it is that Syslog does not show up as an "Eventia Product" so i'm not so sure how to filter on these events to get them pulled into the database.

--Juan

[Juan_Concepcion]

Wondering if anyone has an answer for this as I haven't been able to get it to work??