Is there a way to improve this event?

Currently it gets logged as a generic 'Internal' event and all of the data is in the message field with none of it parsed out.

Example:

"No data received for EventSource x.x.x/ WMS (ID XXXX-XXXXX-XXXXX) for last 0 days 17 hrs 0 min 6 sec (threshold 3,600,000 ms)"

If you could parse the EventSource Name the log source type 'WMS/SYSLOG' etc and the days/min fields into their own variables it would be of huge benefit to track down assets that are connecting in but not sending data. You could then create usable NoDataAlerts for assets/logtype/timeranges.

by: Paul R. | over a year ago | Other