...
The generic parser rules are defined in EventParserRules.nmis which json which is found in the configuration directory /usr/local/omk/conf. Please read the notes at the top of this file first as they are very informative as to what is possible in regard to the parser rules.
...
opEvents will process the trap log file as specified on opCommon.nmisjson. When parsing the traps, at least the following properties should be extracted:
...
The shipped version of EventParserRules.nmis has json has a traplog section that will extract the date, host, trap and details fields for most situations.
...