Processing group of options manages the syslog parser settings.
Processing
Default severity
Syslog Watcher uses this default severity level if the severity is not set in the syslog message itself.
Default facility
Syslog Watcher uses this default facility if it is not set in the syslog message itself.
Remove trailing CR/LF (Carriage Return / Line Feed)
Select this option to remove special symbols that end the message.
Replace non-printable ASCII characters (codes 0-31) with
Syslog Watcher replaces non-printable characters (ASCII codes 0-31) with one of the following options.
Hexadecimal ASCII code of the character
The non-printable characters will be replaces with their ASCII codes in hexadecimal format.
Custom printable character
The non-printable characters will be replaces with the specified character. The default is the dot character.
Replace consecutive characters with one
Syslog Watcher replaces groups of consecutive non-printable characters with only one character.
Force codepage
This option sets the code page to decode message text.
Insert domain name after IP address within message body
This option enables addition post-processing step to scan syslog messages for IPv4 addreses. If Syslog Watcher can convert this address to a domain name, then it inserts that name after the address.
Do not parse message body (do not extract fields)
This option turns off the built-in syslog parser. Select this option if Syslog Watcher parses syslog messages incorrectly in your case.