Re: Zensyslog for 3com switches issue

So are you wanting to just strip the unit id out so you are left with the component and summary?

ie:
^\w{3}\s\d{1,2}\s\d{1,2}:\d\d:\d\d\s\d{4}\s(?:.*\%%)(?P<component>.*?:)(?:-.*?-)(?P<summary>.*)

Would give you these 2 groups:

Or are you wanting to do something special in the transform to make the events unique somehow?

--Rob