False alarms triggered by logmon

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)
• CA Unified Infrastructure Management On-Premise (Nimsoft / UIM)
• CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

A logmon profile with a watcher that searches for a certain string in a file is triggering alarms even though there is no match.

Environment

Logmon probe, any version

Resolution

In that particular profile, for some reason, it was inverted the logic of the watcher by setting this advanced property (Profile-->Watcher Rules --> Advanced)

Match on Every Run:

This property forces an alarm every time the watcher DOES NOT find the string in the message, i.e. inverting the logic.

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/monitoring/systems-and-service-response/logmon-log-monitoring/logmon-im-configuration.html#:~:text=Configure%20Advanced%20Properties 

https://knowledge.broadcom.com/external/article/144053/uim-considerations-on-logmon-match-on-e.html