Yes, I have a customisable count of messages to scan for E lines. If no E found 
a warning will be issued. Header lines are covered, interleaved messages are 
covered. This is what the code is designed for; to extract complete messages 
from a syslog, to scan for multiple messages at the same time, and to 
optionally place them in different output sets.

The issue with S line after the M line is that continuation number is specified 
at the end of that S line, rather than at the end of the M line. 

Lennie

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Jon 
Perryman
Sent: 02 September 2025 23:08
To: [email protected]
Subject: Re: Syslog questions

On Tue, 2 Sep 2025 21:03:31 +0000, Lennie Bradshaw 
<[email protected]> wrote:

>I have discovered that on occasion the 'M' line of a MLWTO can also be split 
>into 2 lines. 
>So, in that situation there is then an M, followed by an S, followed by 
>0 or more Ds and then an E. This will complicate my processing.

It can be far more complex. Some products do not send the E (end MLWTO) so 
depend upon it. A few products may take minutes, hours or days to send the E. 
Additionally, you might have other codes to consider. Header line, WTOR, 
interleaved messages, or ???  might or might not be sent. You need to make your 
code resilient against unexpected situations.  

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to