Parse bug?

Tags:

#1 cameronwp

Hello:

I am trying to send an event related to terminal server logins to a logstash instance. When the message associated with the event contains an IPv4 address it works without issue. When the source network address in the message is IPv6 (containing a percent symbol), nxlog fails to parse the message with the error "ERROR_EVT_UNRESOLVED true". I have tried doing a replace of the % but it hasn't had and effect. Thanks!

#2 Zhengshi Nxlog ✓
#1 cameronwp
Hello: I am trying to send an event related to terminal server logins to a logstash instance. When the message associated with the event contains an IPv4 address it works without issue. When the source network address in the message is IPv6 (containing a percent symbol), nxlog fails to parse the message with the error "ERROR_EVT_UNRESOLVED true". I have tried doing a replace of the % but it hasn't had and effect. Thanks!

What version of nxlog are you using? What OS version is this running on?
Could you post your config here? (sanitized as needed is fine, of course)