locked
SCOM Log file Monitor - NICE MP RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I want to monitor multiple log files in same server. Created single alert generating rule ( Nice Log File)

    1) Nice Log file -> Alert ruel -> Expression Filtered -> alert rule

    2) I source setting  - gave full path

    D:\Test\Test.txt

    D:\Test\Test1.txt

    3) In build event expression - LogFileLine  Contains Error

    So alert should be generated whenever word "Error" is logged in text file

    But I am getting only one alert from test.txt but not from Test1.txt.

    How can I receive different alerts from 2 log files from same server fro the same error.

    Also I am not able to get the alert from multiple  servers for the same path and same error.

    Thanks in advance

    Wednesday, June 29, 2016 8:41 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Sir,

    I assume that you are going to monitoring txt file for windows servers .

    To monitor two txt files , I would suggest you to use aggregate rollup monitor :

    1.create a aggregate rollup monitor (worst state of any member)

    2.crate two unit monitor (time reset ; without alert) for each txt file .

    If you want to monitor specific servers , you may try to create a group for these servers .

    Best Regards,

    Elton

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com .

    • Proposed as answer by Elton_Ji Tuesday, July 5, 2016 8:01 AM
    • Marked as answer by SaveEarthGreen Wednesday, July 6, 2016 1:21 PM
    Thursday, June 30, 2016 9:23 AM