logmon Watcher configuration for specific strings

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

This article provides steps to configure the Logfile Monitoring (logmon) probe to scan ASCII-based log files and generate alarms based on specific match expressions or string patterns.

 

 

Environment

• DX Unified Infrastructure Management (UIM) 8.51 and higher
• Robot 7.80 and higher
• logmon probe 3.54 and higher

 

Resolution

To monitor a log file for a specific string (e.g., "ERROR => Exiting" or "temporary name resolution failure"), follow these steps:

1. Open the logmon probe configuration.
2. Create a new Profile and define the log file path in the File field (e.g., /var/log/syslog or C:\logs\app.log).
3. In the General tab, ensure the Generate Alarm checkbox is enabled.
4. Navigate to the Watcher Rules tab and click New to create a rule.
5. In the Match Expression field, enter the string pattern using asterisks for wildcards (e.g., *ERROR => Exiting* or *temporary name resolution failure*).  You may also use Regular Expressions by enclosing them in forward slashes, e.g. /.*ERROR\s=>\sExiting.*/
6. (Optional) To create alarms based on the number of occurrences:
   1. Navigate to the QOS tab under Watcher Rules.
   2. Enable Count Matches.
   3. In the Alarm tab, set the appropriate operator and threshold (e.g., < 10).
   4. Define variables in the Variables tab if you need to extract specific data from the log line using regex.
7. Click OK and restart the probe to apply changes.

Additional Information

For additional usage information and further detail, consult the Logmon Official Documentation.

If assistance is required, contact Broadcom Support.