Ticket #353 (new defect)
Opened 2 years ago
CheckEventLog not handling $ in eventlog messages
| Reported by: | tngo | Owned by: | MickeM |
|---|---|---|---|
| Priority: | 1 | Milestone: | |
| Component: | Core | Version: | 0.3.7 |
| Severity: | Bugs | Keywords: | |
| Cc: |
Description
CheckEventLog with descriptions and %message% doesn't appear to handle $ characters in the Event Log.
Sample check: CheckEventLog -a filter=new file=system file=application MaxWarn=1 MaxCrit=1 filter-generated=\>1h filter=in filter+eventType==error unique descriptions "syntax=%message%"
Sample log: The session setup from the computer USER failed to authenticate. The name(s) of the account(s) referenced in the security database is USER$. The following error occurred: Access is denied.
Output returned: %%5, eventlog: 1 > critical|'eventlog'=1;1;1; e security database is
Note: See
TracTickets for help on using
tickets.







