logmon custom input format does not detect start and end expression on the same line

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

I have configured Logmon with a custom input format that watches for a start expression and an end expression:

It appears the probe can detect the following situations:

BEGIN
(data)
END

BEGIN (data)
END

BEGIN
(data) END

 

However, the following line is completely missed by the probe:

BEGIN (data) END

 

When the start and end expressions appear on the same line, the probe does not detect it at all.

Environment

logmon probe - any version

Cause

Limitation

Resolution

This is a limitation of the logmon probe.  When a custom input format is defined, it is assumed that the format will always be more than one line.  "Mixed" formats where the expression is sometimes a multi-line and sometimes a single-line expression cannot be properly detected.

 

Additional Information

Engineering is considering enhancing the probe in the future to allow this, but as of August 2024 and logmon version 4.23 it is not supported.