Toshiba Magnia 3200 - Manual (Page 142)

For FMT file, it is as follows.
FORMAT NT_Base
%t %s %s %s %s %s %s %s*
hostname DEFAULT
origin DEFAULT
category $3
eventType $4
sid $5
sub_source $6
id $7
msg $8
-date1 $1
-date2 $2
date PRINTF("%s %s", date1, date2)
END
// Date year category 'Error' SID App ID Message
FORMAT NT_Error
%t %s %s Error %s*
hostname DEFAULT
origin DEFAULT
severity CRITICAL
category $3
eventType Error
msg $4
-date1 $1
-date2 $2
date PRINTF("%s %s", date1, date2)
END
// Date year category 'Warning' SID App ID Message
FORMAT NT_Warning
%t %s %s Warning %s*
hostname DEFAULT
origin DEFAULT
severity WARNING
category $3
eventType Warning
msg $4
-date1 $1
-date2 $2
date PRINTF("%s %s", date1, date2)
END
132