Does the LogFilter agent has a FAQ?
There is a LogFilter FAQ - see the list of available solutions below:
Solution 89824 How to set the configured "User Message" in the LogFilter alarm?
Solution 75131 LogFilter alerts will not repeat if an existing alarm has not been cleared.
Solution 83691 New LogFilter agent does not show up in Topology
Solution 73810 LogFilter agentName is missing from Agent Hosts dashboards.
Solution 71397 Does LogFilter use RegEx industry standard?
Solution 90881 How would one use Regex for a rolling log file?
General LogFilter Information
The LogFilter agent is only created as a topology when data is actually collected by the agent.
Therefore, you will not be able to add the agent instance to any rule until after the data has been collected.
To test the logfilter agent (to ensure data is collected) you will have to echo lines into a test file to capture the matched string.
You cannot open the file and edit it (this ruins the marker the agent uses against the agent).
When the target log file name is first reviewed by the agent, it does not review the contents of that file, but puts a 'marker' at the end.
you will have to append new lines into the target log file for it to be matched against the match list you created.
Q: Just curious how does the agent find know or define the "latest file" that match the file pattern?
A: All files matches the file name(or regex) sorted by file timestamp.
Q: It is all based on the marker?
A: No
Q: Also, is the marker directly inserted into the log file meaning that it will actually write to and edit the log files?
A: No edit/write to any user log files. The agent remembers the position in memory as a variable.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center