CA UIM logmon Probe Configuration

[Anon Anon]

Hi Team,

 

I am trying to monitor a .log file using logmon probe. But I am not be able to configure it properly.

The content of .log file is as below:

 

12/12 15:55:49.57 SDM14 pdm_maileater_nxd 4836 ERROR pdm_maileater_nxd.c 8973 POP3 Mail: Failed to connect to localhost
12/12 15:55:49.57 SDM14 pdm_maileater_nxd 4836 ERROR pdm_maileater_nxd.c 8317 Failed to connect to localhost at port 1109.
12/12 15:55:49.57 SDM14 pdm_maileater_nxd 4836 ERROR pdm_maileater_nxd.c 5009 Mailbox 100 (@localhost/Inbox) produced error during Mail Poll.
12/12 15:56:11.56 SDM14 pdm_maileater_nxd 4836 ERROR pdm_maileater_nxd.c 8973 POP3 Mail: Failed to connect to localhost 

 

When I configure the probe for 4836 Error then alarm occurs continuously, which is not based on time stamp. So, please help me to configure the logmon probe based on the time stamp.

 

Thanks in Advance!!

Anuj Choudhary

[Garin Walsh]

The default suppression key is the text of the message (well teh first x characters of it depending on your nas configuration). Each one of those lines is different enough that even though it is the same watcher, the match will look like a unique occurrence. On the advanced tab (I think) is a place to supply a suppression id of your creation. That will then allow you to roll all these separate lined from the log file into a single alarm that just increments in count.

 

Alternatively, you could just make your regex more specific.

 

-Garin