change syslog message

RouterOS The Dude
1

Hello,

I use syslog message and I’d like to change the message.
For exemple, i receive from an apache server the message :
<131>Jul 31 09:34:37 serverName apache2[10929] : [error] [client 127.0.0.1] File does not exist …

I used filters :
First is : Regexp : apache2 ; Action : passthrough ; notification : type : popup, message : test.
Second is : Action : log to syslog

When the error arrives on syslog serveurn the popup is opened but the message is not “test” but the error bellow.

Do you have any idea how to apply a new message on the event.

Thanks a lot

2

Put test in quotes?

3

I hust try, but it doesn’t work as well …

4

what is the error?

5

I have no error and found no error in logs … it’s still the syslog’s message which is displayed.

6

Can you screen shot your trouble, check out the program greenshot.

7

Here is an example.
Only for the logs from apache, i’d like to open a popup with an other message.
dude.png
I have a notification “commande” which should display in a popup “test”. But instead, it’s the original syslog message which is displayed.

8

I don’t know why that popup is passing the syslog message through instead of replacing the message.

When you click on test button the message is “test” I would assume. Many of these messages are in context but since you are getting your context from syslog changing to system.name or some other variable will not work. I doubt there is an easy fix.