locked
Log file monitoring RRS feed

  • Question

  • Hi,

    I want to create a log file monitoring in SCOM (2012 R2) to monitor a file for error message- ANSXXXX (XXXXX value may very from 0000 to 9999 with a alphabet at end, like ANS0101E, ANS5134D or AN999I etc). Is there a way to build an expression for Params/Param[1] using any specific Operator(MatchesWildCard or ContainsSubString) and Pattern to cover this error message in single log file Rule/Monitor?

    Regards

    Kanak

    Tuesday, June 9, 2020 11:19 AM

Answers

  • "Matches Regular Expression" should do the trick with something like "ANS[0-9][0-9][0-9][0-9][A-Z]" 
    Tuesday, June 9, 2020 2:55 PM
  • Besides cyraz suggestion, i suggests another regular expression pattern.

    [A|a][N|n][S|s][0-9]{4}[a-z|A-Z]

    It is because regular expression is case sensitive, my suggestion can match pattern like ans0101E, ANS5134d or ANs999I.

    Roger

    Wednesday, June 10, 2020 1:49 AM

All replies

  • "Matches Regular Expression" should do the trick with something like "ANS[0-9][0-9][0-9][0-9][A-Z]" 
    Tuesday, June 9, 2020 2:55 PM
  • Besides cyraz suggestion, i suggests another regular expression pattern.

    [A|a][N|n][S|s][0-9]{4}[a-z|A-Z]

    It is because regular expression is case sensitive, my suggestion can match pattern like ans0101E, ANS5134d or ANs999I.

    Roger

    Wednesday, June 10, 2020 1:49 AM
  • Thanks mate for the help..
    Wednesday, June 10, 2020 5:19 AM
  • Thanks a lot for providing the solution..
    Wednesday, June 10, 2020 5:20 AM