The current LogFilter agent has the Warn,Critical,Fatal entries in the agent properties FilterTrapFile so one has no control over email distribution based on Severity. Is there any method to achieve this task?
The ability to send a distinct email for a particular Service in Service Builder was introduced in Foglight 5.5.5 .
This approach could be used to send distinct emails for Warning, Critical & Fatal events for each individual LogFilter agent(s) which monitor the same file.
Screenshot example LogFilter Services.bmp attached.
1) Deploy three separate LogFilter agents; each with its own FilterTrapFile of Warning entries for LogFilter_Warn agent #1, then Critical lists for agent #2, then Fatal for agent #3.
ie. FilterTrapFile_Warn, FilterTrapFileCritical, FilterTrapFile_Fatal.
2) Start the agents and force the agents to perform a collection by echoing a 'matched' entry to your monitored text file.
ie. echo "warncrit" >> mymonitoredfile.txt.
Perform this for each of your warning, critical & fatal match strings.
3) Once the agents have triggered an alert, you can then build your Service Categories for Warning, Critical and Fatal and add your agent components in Dashboards | Services | Service Builder for each defined Service. Attached is a screenshot highlighting two LogFilter agents for Warning & Critical with separate email targets.
Reference "Building a Service" in the Web Console Help for this topic of Creating a Service which covers Adding a New Category and Adding Service Components.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center