Add Field Resolvers in Logging Profile elements

For converting syslog values, add a field resolver for either multiple values or for date and time.

  For more details about the product and how to configure features, click Help or press F1.

Steps

  1. In the Logging Profile, click the Field Resolvers branch in the left pane.
  2. Drag and drop a Field Resolver to the Header field or to the Patterns pane.
  3. If the Field Resolver you want is not listed, right-click a Field Resolver, then select New > Field Resolver. Define the Field Resolver for either multiple values or for date and time.

Field Resolver Properties dialog box

Use this dialog box to define the properties for a Field Resolver.

Option Definition
Name The name of the element.
Field Type Select from the following:
  • Multi-valued — The field can have several values.
  • Date — The field is related to the time and date.
Time Field

(When Field Type is Date)

Shows the selected Time Field. You can select the log field for which you want to define a time stamp. Click Select to select an element.
Time Format

(When Field Type is Date)

Enter the format that the third-party device uses for the time stamp.

Note: Type the format according to Java standards. For syntax, see http://⁠docs.oracle.com/javase/1.5.0/docs/api/java/text/SimpleDateFormat.html.
Fields

(When Field Type is Multi-valued)

Shows the selected SMC log fields. The incoming syslog data is inserted into the log fields that you select. Click Add to add an element to the list, or Remove to remove the selected element.
Value Enter a value for the field. The other columns in the table come from the fields that you add to the Fields list. Click Add to add a row to the table, or Remove to remove the selected row.