logmon probe monitoring 0 in the log

[Siddharth Rai]

we have a LDAP server, and there is a file where it writes 0 in the log when replication is OK (green). How can i configure it to have an alarm when it doesnt read 0 in the log ??

now i want to have an alert when there is anything other than 0 in this log.

------------------------------
System Analyst
DXC Technology
------------------------------

[David Michel]

more details probably would have resulted in a quicker and better response. 
logmon does a 'match' no 'do not match' 
if there is a specific range of characters written then could alarm on those or each for more info
example 
match 1 or 2 - alarm 
match 1 - alarm status 1 crash
match 2 - alarm status 2 out of memory 
If there is an unlimited number of characters it will write to the file then perhaps at  the advanced tab checked the "match on every run", with a "Send clear alarm". so if the match to 0 is made the alarm is generated and then cleared right away, and if it doesn't match, it will use the "message to send" added in the Standard tab.

------------------------------
Support Engineer
Broadcom
------------------------------

[Garin Walsh]

You will need two watchers - one to clear and one to flag the error.

First one matches on /^0$/ and is a clear. Set the option "Abort on Match" on the advanced tab. This will stop all following watchers from firing. And clear existing errors if one exists.

Your second watcher matches on /.*/ and sets the error. Only way it gets here is if the first one didn't match a 0 which gives you the "match if not zero" function.

-Garin