locked
Giving alert descriptions for logfile monitoring RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Can somebody please helo me to know this better.

    we would be using xml for creating management packs, while creating a MP for logfile monitoirng how would you give the alert description for multiple errors in single logfile.txt

    Eg:

    Logifle path => E:/temp/test.txt

    i want to monitor 3 strings in the above path (error / duplicate / restart), how would i give the alert description in a sngle monitor

    Alert description == $Data/Context/Params/Param[1]$

    Thursday, October 16, 2014 8:08 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    For Alert Description, you can use the same Dynamic value "$Data/Context/Params/Param[1]$" to fetch the string which is matched.

    It will fetch for any of three strings given. To make the Alert Description in understandable way, I will use some static message in Alert description like

    "There is an (error/duplicate/restart) string occured in log file E:/temp/test.txt. Please see below string for exact error."

    $Data/Context/Params/Param[1]$

    Regards, Suresh

    Friday, October 17, 2014 4:13 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the answer Suresh,

    but the above alert description $Data/Context/Params/Param[1]$ is working only for simple logfile detection

    <LogFileDirectory>E:\logfiles\Logs\</LogFileDirectory>

      <LogFilePattern>IPCDataService.log</LogFilePattern>

      <LogIsUTF8>false</LogIsUTF8>

      <Expression>

    but it is not working for

      <RepeatedLogFileDirectory>E:\logfiles\Logs\</RepeatedLogFileDirectory>

      <RepeatedLogFilePattern>IPCDataService.log</RepeatedLogFilePattern>

      <RepeatedLogIsUTF8>false</RepeatedLogIsUTF8>

      <RepeatedExpression>

    Monday, October 27, 2014 10:32 AM