Logmon Probe: Variable Threshold Configuration for Alarms

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

This article provides instructions for configuring thresholds on custom variables within the logmon probe to trigger alarms based on specific command output or log entries. A common use case includes triggering an alarm when network latency (e.g., average ping time) or server health metrics breach a defined limit.

D:\Users\abc.d>ping ##.##.##.##

Pinging ##.##.##.## with 32 bytes of data:
Reply from ##.##.##.##: bytes=32 time=1ms TTL=63
Reply from ##.##.##.##: bytes=32 time=2ms TTL=63
Reply from ##.##.##.##: bytes=32 time=2ms TTL=63
Reply from ##.##.##.##: bytes=32 time=1ms TTL=63

Ping statistics for ##.##.##.##:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 3ms, Maximum = 4ms, Average = 3ms

Environment

• Product: DX Unified Infrastructure Management (Nimsoft / UIM)
• Probe: logmon (all versions)

Resolution

Step 1: Create a Command Mode Profile

1. Open the logmon probe configuration.
2. Create a new profile or edit an existing one.
3. In the General tab, set the Mode to command.
4. In the Command field, specify the command to be executed.
   • Example: ping #.#.#.# (Windows/Linux)

Step 2: Define the Watcher Rule and Match Expression

1. Navigate to the Watcher Rules tab and create a new rule.
2. In the Standard tab, enter a Match Expression using regular expressions (regex) to identify the relevant data in the command output.
   • Example for ping average time: /.*Average = (.*)ms.*/
   • Note: This regex looks for the 'Average =' string and captures the numeric value.

 

Step 3: Configure the Custom Variable

1. In the Variables tab of the Watcher Rule, create a new variable (e.g., AvgTime).
2. Set the Source to Match Expression.
3. Set the Match Group to 1 to extract the value captured in the parentheses from the Match Expression.

Step 4: Define Thresholds and Alarms

1. In the Threshold tab of the variable, define the breach condition.
   • Example: Trigger an alarm when AvgTime is greater than 100.

Step 4: Define Thresholds and Alarms

1. In the Threshold tab of the variable, define the breach condition.
   • Example: Trigger an alarm when AvgTime is greater than 100.
2. In the Standard  tab, configure the message to be sent when the threshold is reached. Use dynamic substitution for the variable:

Additional Information

logmon use cases