Details
-
Type:
Enhancement
-
Status: Resolved (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 22.0.2
-
Fix Version/s: 22.0.3, Meridian-2018.1.0
-
Component/s: Event Reception - Syslog
-
Security Level: Default (Default Security Scheme)
-
Labels:None
-
Sprint:Horizon - August 1st 2018, Horizon - August 8th 2018
Description
Given a Syslog message that does not contain the source host:
%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet5/9 (75), with switch.fqdn.com GigabitEthernet2/4/21 (2)
we would expect the generated events to be associated with the host that generated the message.
When a Syslog message is currently matched without any host component using the org.opennms.netmgt.syslogd.RadixTreeSyslogParser, the resulting event is not associated with any interface. This also leads to newSuspect events being generated with a null IP address parameter.