pC_microsoftrrasstrappnotificationerroroccurred.md

Parser Content

{
Name = microsoft-rras-str-app-notification-erroroccurred
  ParserVersion = "v1.0.0"
  Vendor = Microsoft
  Product = Microsoft RRAS
  TimeFormat = "yyyy-MM-dd'T'HH:mm:ss.SSSZ"
  Conditions = [ """CoId= {""", """The following error occurred""" ]
  Fields = [
    """CoId=\{({session_id}[^\{\}]+?)\}""",
    """\WUserName:\s*(<|&lt;)(({user}[\w\.\-\!\#\^\~]{1,40}\$?)|({full_name}[^"=]+))(>|&gt;)""",
    """\WSpecifically,\s*({failure_reason}[^\.]+)""",
  ]


}