DX Unified Infrastructure Management

 View Only
  • 1.  variable logmon use

    Posted Oct 14, 2024 02:46 PM
      |   view attached

    Dear community, could someone guide me with the use of the logmon variable of the "Match Expression" type? The documentation is not very clear.



  • 2.  RE: variable logmon use

    Broadcom Employee
    Posted Oct 15, 2024 06:39 AM

    hi Jose,

    i have just been working on this and found this: https://knowledge.broadcom.com/external/article/233742/using-regex-in-variables-for-the-logmon.html which helped me a lot.

    The Match Expression relates to the expression used is the Standard tab to identify the message. However, in that expression you must use groups (basically a match surrounded with brackets()) and the number should relate to the group value you want to use, so if you have 3 groups in your expression but the value you want is the second, make sure the value is 2 (beside Character Position).

    Here is an example i used with one group: /Currently established client connections <.*?>\s*<.*?>(\d*)/

    Note: Ignore the alarming, this is an example for RegEx usage

    Now in the Variable Setting, select the Match Expression and use the number 1 for the group i created:

    The Expected Value can be used on the value extracted.

    A good place to test RegEx is regex101.com, select PCRE as this is the type used for logmon, do not use any modifiers (gm etc.) as they aren't used in logmon. Paste in your test string, then work on your regex including a group, these will be highlighted to you on the right-hand side:

    Thanks,

    Steve




  • 3.  RE: variable logmon use

    Posted Oct 16, 2024 12:43 PM

    Thank you for the statement, only one when you apply "Expected Value"




  • 4.  RE: variable logmon use

    Broadcom Employee
    Posted Oct 17, 2024 04:16 AM

    hi Jose,

    Here is the definition of the alarm in the watcher rule:
    image.png
    The alarm definition is done in the Variable and this causes the alarm to fire:
    image.png
    Here is the alarm created:
    image.png
    Thanks,
    Steve



  • 5.  RE: variable logmon use

    Posted Oct 17, 2024 01:47 PM

    Thank you for your reply, I have tried to view the images in different browsers but they do not display. Could you attach those images please?




  • 6.  RE: variable logmon use

    Broadcom Employee
    Posted Oct 18, 2024 12:17 PM

    hi Jose,

    Here is the definition of the alarm in the watcher rule:

    The alarm definition is done in the Variable and this causes the alarm to fire:

    Here is the alarm created:

    Thanks,
    Steve



  • 7.  RE: variable logmon use

    Posted Oct 18, 2024 02:46 PM

    Thanks for your support, it helps me a lot




  • 8.  RE: variable logmon use

    Broadcom Employee
    Posted Oct 15, 2024 08:28 AM

    Hi Jose,

    Here is another KB Article on the use of logmon variables that you may also find helpful:

    Use and configure variables in logmon probe profiles

    Best Regards,

    Steve



    ------------------------------
    Steve Danseglio
    Technical Support Engineer 4 | IMS Division
    UIM Certified Expert
    KCSv6 Practices Certified
    Certified Customer Success Manager (CCSM) Level 1
    ------------------------------