Ticket #353 (new defect)

Opened 2 years ago

CheckEventLog not handling $ in eventlog messages

Reported by: tngo Owned by: MickeM
Priority: 1 Milestone:
Component: Core Version: 0.3.7
Severity: Bugs Keywords:
Cc:

Description

CheckEventLog with descriptions and %message% doesn't appear to handle $ characters in the Event Log.

Sample check: CheckEventLog -a filter=new file=system file=application MaxWarn=1 MaxCrit=1 filter-generated=\>1h filter=in filter+eventType==error unique descriptions "syntax=%message%"

Sample log: The session setup from the computer USER failed to authenticate. The name(s) of the account(s) referenced in the security database is USER$. The following error occurred: Access is denied.

Output returned: %%5, eventlog: 1 > critical|'eventlog'=1;1;1; e security database is

Note: See TracTickets for help on using tickets.