splunk-connect-for-syslog
splunk-connect-for-syslog copied to clipboard
splunk
Add support for Dell Powerstore Alert Logs
What is the sc4s version ? 3.37.0
Describe the bug
In the dell powerstore parser sc4s is only looking for PowerStore_audit_event.
My customer is sending and needing support for PowerStore_remote_logging_alert@1139 too.
Can you please add this to the default parser? Currently the logs are coming in as sc4s:fallback
For example
PRI=117
MESSAGE=[351]: 2025-10-21T14:59:58 CRK00111111111-A PS1f011111111d 351@FHPGNM3 AlertEvent [PowerStore_remote_logging_alert@1139 sequence_number="52497" event_name="REMOTE_SUPPORT_CONNECTIVITY_STATUS_NORMAL" resource_type="remote_support" resource_name="SupportAssist" alert_id="ef7b021c-23a0-4821-8245-289cbdc7addd" alert_state="Cleared" appliance_name="rzpowerstore01-appliance-1" event_id="b320f9b7-c44e-bd39-ab56-8d278c69f6bb" event_code="0x00d00203" system_impact="None" repair_flow=""] Cluster connectivity is good. Appliance status: A1 Good.
Kind Regards
Implemented changes necessary for this here: https://github.com/splunk/splunk-connect-for-syslog/pull/2818
It should be a part of our next release.
